excel-toolkit

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/recalc.py

The fragment shows a high-risk macro-driven workflow intended to recalculate Excel files via LibreOffice macros. The presence of writing a macro file (Module1.xba) and invoking soffice to run a macro is a potential backdoor/control flow, though the current code is syntactically broken due to an undefined macro_content. If fixed, this would enable a macro execution path that could be abused by supply chain manipulation or malicious payloads. Overall risk hinges on macro_content provenance and how the tool is used, but the design presents a notable security concern (macro-based execution) and warrants careful review of macro content provenance and user consent. The current state has a broken macro_content assignment which prevents execution, reducing immediate risk but indicating likely incomplete or tampered code.

Confidence: 56%Severity: 55%
Audit Metadata
Analyzed At
Mar 20, 2026, 02:09 PM
Package URL
pkg:socket/skills-sh/Sentry01%2Fcopilot-cli-skills%2Fexcel-toolkit%2F@2bbda143bd6251d95291740ae4c705cbd1470433