csv-formula-injection

Detect and neutralize formula injection vulnerabilities in CSV and spreadsheet documents.

Updated Jun 11, 2026

Search Tags:#data integrity #vulnerability assessment #csv #formula injection #spreadsheet security

Ready to run

npx skills add https://github.com/utsavthakur/agenticskills --skill csv-formula-injection-utsavthakur

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: csv-formula-injection
Source: https://github.com/utsavthakur/agenticskills/tree/main/csv-formula-injection
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill csv-formula-injection-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires csv, re, xlrd, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and address potential CSV formula injection vulnerabilities in spreadsheets and reporting tools, providing a defense against attacks that can compromise data integrity and security.

Core Features & Use Cases

Vulnerability Detection: Identifies malicious formulas that could be used to inject commands or steal data.
Spreadsheet Security: Offers methods to sanitize inputs and protect against formula-based attacks.
Use Case: Use this Skill to scan a company's spreadsheet templates for risky formulas before they are used by end-users, thus reducing the risk of a data breach.

Quick Start

Run the 'csv-formula-injection' skill on your spreadsheets to scan for and neutralize any formula injection vulnerabilities.

Frequently Asked Questions about csv-formula-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect CSV formula injection vulnerabilities in spreadsheets?▼

To prevent CSV formula injection, you must sanitize spreadsheet inputs by neutralizing risky formulas before they execute. This involves scanning documents to identify and mitigate malicious commands, thereby enhancing overall data security and integrity.

Does this formula injection scanner work with LibreOffice Calc and Google Sheets?▼

Yes, the formula injection scanner works with LibreOffice Calc and Google Sheets, alongside Excel. It monitors and analyzes risky formulas across these platforms to ensure comprehensive spreadsheet security and data protection.

What Python libraries are required to scan for spreadsheet formula injection?▼

Scanning for spreadsheet formula injection requires Python's 'csv', 're', and 'xlrd' libraries. These dependencies are utilized to parse documents and analyze cell contents for malicious formula patterns and injection risks.

What is CSV formula injection and how does it affect data integrity?▼

CSV formula injection is an attack where malicious formulas are inserted into CSV files to execute commands or steal data when opened by spreadsheet applications. It compromises data integrity by allowing unauthorized code execution within the document.

How do I sanitize spreadsheet templates for risky formulas before user deployment?▼

To sanitize spreadsheet templates for risky formulas, run an automated scan to identify and neutralize injection vulnerabilities before user deployment. This proactively prevents malicious code execution and protects against potential data breaches.