Security Threat model Never execute macros or formulas. Avoid path traversal when processing ZIP entries. Keep processing local and deterministic. Reporting issues Please open a GitHub issue with a minimal reproducer and sample file metadata.