CSV Tools
CSV Formula Injection Scanner
Scan CSV cells for spreadsheet formula injection (=, +, -, @).
Loading tool…
What is Formula Scan?
A security scanner for CSV exports: cells beginning with = + - @ or tab can execute as formulas when opened in a spreadsheet — a known attack vector.
How it works
Every cell's first character is checked against the dangerous prefixes; findings are listed by row/column, and optional sanitization prepends a single quote.
- Enter your input. Type or paste your input into the field above — the tool responds instantly.
- Review the result. Output updates live as you type. Everything runs entirely in your browser.
- Copy or download. Use the Copy button to grab the result, or Download to save it as a file.
Examples
Realistic sample
Paste or type any realistic input — the tool computes the result locally and instantly.
Common mistakes
Expecting a server round-trip
Nothing is uploaded — every tool in this category runs entirely in your browser.
Frequently asked questions
Why does a leading '=' matter?
Spreadsheets evaluate cells starting with = as formulas, so exported data can execute code like =CMD() on open. Prefixing with a quote makes it inert text.