csv-formula-injection

CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when exports, imports, or user fields feed spreadsheets or reporting tools.

Try your first task

Plan a benign CSV formula-evaluation check

Start a fresh conversation.

Use the csv-formula-injection skill to design a minimal, authorized check of the sample export at <sample-export-path>. Start only with benign arithmetic cells such as =1+1 and the documented prefix variants. Explain which user-controlled fields and export sinks to inspect, how to open the file in the named spreadsheet application, and how to record whether each cell remains text, calculates, or raises a warning. Do not use DDE, commands, remote URLs, or external-data functions.

Required inputs

Path replacing <sample-export-path>
Spreadsheet application and version
Authorized export workflow
List of user-controlled fields represented in the export

Suggested template by Skill Leaderboard, grounded in the linked source. Task evidence ↗

Inside SKILL.md

144 lines

Section content has not been verified for this skill yet.

Full source remains withheld under the current source-display policy. Read the author’s source ↗