xlsx

Warn

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION] (MEDIUM): The script performs dynamic code generation by writing a StarBasic macro (Module1.xba) to the local filesystem and then executing it via LibreOffice.
  • Evidence: In recalc.py, the setup_libreoffice_macro function writes XML-wrapped StarBasic code to the user's configuration path (~/.config/libreoffice/... or ~/Library/Application Support/...). The recalc function then executes this macro using subprocess.run with a vnd.sun.star.script URI.
  • [DATA_EXPOSURE] (SAFE): While the script reads Excel files and scans all cells for error strings (e.g., #VALUE!, #REF!), it does not transmit this data over the network.
  • [PROMPT_INJECTION] (SAFE): No natural language prompts or behavioral overrides were detected in the script or license file.
  • [EXTERNAL_DOWNLOADS] (SAFE): No remote script downloads or unverified package installations were detected.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 06:37 PM