excel-toolkit
Audited by Socket on Mar 20, 2026
1 alert found:
AnomalyThe fragment shows a high-risk macro-driven workflow intended to recalculate Excel files via LibreOffice macros. The presence of writing a macro file (Module1.xba) and invoking soffice to run a macro is a potential backdoor/control flow, though the current code is syntactically broken due to an undefined macro_content. If fixed, this would enable a macro execution path that could be abused by supply chain manipulation or malicious payloads. Overall risk hinges on macro_content provenance and how the tool is used, but the design presents a notable security concern (macro-based execution) and warrants careful review of macro content provenance and user consent. The current state has a broken macro_content assignment which prevents execution, reducing immediate risk but indicating likely incomplete or tampered code.