xlsx
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (MEDIUM): The script performs dynamic code generation by writing a StarBasic macro (
Module1.xba) to the local filesystem and then executing it via LibreOffice. - Evidence: In
recalc.py, thesetup_libreoffice_macrofunction writes XML-wrapped StarBasic code to the user's configuration path (~/.config/libreoffice/...or~/Library/Application Support/...). Therecalcfunction then executes this macro usingsubprocess.runwith avnd.sun.star.scriptURI. - [DATA_EXPOSURE] (SAFE): While the script reads Excel files and scans all cells for error strings (e.g.,
#VALUE!,#REF!), it does not transmit this data over the network. - [PROMPT_INJECTION] (SAFE): No natural language prompts or behavioral overrides were detected in the script or license file.
- [EXTERNAL_DOWNLOADS] (SAFE): No remote script downloads or unverified package installations were detected.
Audit Metadata