csv-formula-injection

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document explicitly describes and demonstrates malicious CSV/spreadsheet payloads (DDE/cmd/PowerShell execution), obfuscation techniques, and network-based exfiltration (IMPORT*/IMPORTXML to attacker URLs), which are clearly usable for deliberate abuse.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill provides concrete CSV/spreadsheet payloads that invoke local commands (DDE, cmd|, PowerShell) and remote fetches, which can trigger code execution on a machine when opened and thus can compromise the host state.