xlsx-processing-anthropic
Audited by Socket on Feb 16, 2026
1 alert found:
Obfuscated FileThe documentation and examples align with the stated purpose of robust spreadsheet creation and formula recalculation. There is no direct evidence in the provided text of network exfiltration, credential harvesting, obfuscated code, or explicit malicious constructs. However, the mandatory and opaque ./scripts/recalc.py that 'automatically configures LibreOffice' and 'scans ALL cells' is the primary security concern: it can modify system state, interact with macros, and disclose cell-level details. Recommendation: Obtain and audit the full source of ./scripts/recalc.py before running in sensitive environments; treat .xlsm files and any spreadsheets with confidential data cautiously (consider running recalc in an isolated/sandboxed environment and ensure recalc output is redacted/not transmitted).