Skip to content
skillsafebeta
← Report library
Purpose / Documents

Gws Sheets Skill Security Audit

What the author says it does (original text)

Google Sheets: Read and write spreadsheets.

Independent security check

No obvious risks found in this check

Files checked
1
Risks found
0
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

3 instruction sections

This Skill is a command-line interface guide for Google Sheets. It states that it can read and write spreadsheets and requires the `gws` executable to be installed.

View source
SKILL.md:3In the instructionsOpen original file
name: gws-sheetsdescription: "Google Sheets: Read and write spreadsheets."metadata:
SKILL.md:8In the instructionsOpen original file
    category: "productivity"    requires:      bins:        - gws    cliHelp: "gws sheets --help"
SKILL.md:18In the instructionsOpen original file
```bashgws sheets <resource> <method> [flags]```

It exposes operations to read, append, create, and batch-update spreadsheets. Creation and batch updates can change the user's Google Sheets data, but those capabilities match the stated read/write purpose.

View source
SKILL.md:26In the instructionsOpen original file
|---------|-------------|| [`+append`](../gws-sheets-append/SKILL.md) | Append a row to a spreadsheet || [`+read`](../gws-sheets-read/SKILL.md) | Read values from a spreadsheet |
SKILL.md:33In the instructionsOpen original file
  - `batchUpdate` — Applies one or more updates to the spreadsheet. Each request is validated before being applied. If any request is not valid then the entire request will fail and nothing will be applied. Some requests have replies to give you some information about how they are applied. The replies will mirror the requests. For example, if you applied 4 updates and the 3rd one had a reply, then the response will have 2 empty replies, the actual reply, and another empty reply, in that order.  - `create` — Creates a spreadsheet, returning the newly created spreadsheet.  - `get` — Returns the spreadsheet at the given ID. The caller must specify the spreadsheet ID. By default, data within grids is not returned. You can include grid data in one of 2 ways: * Specify a [field mask](https://developers.google.com/workspace/sheets/api/guides/field-masks) listing your desired fields using the `fields` URL parameter in HTTP * Set the includeGridData URL parameter to true.

Authentication, global flags, and security rules are not included in the supplied source; they are delegated to a neighboring shared Skill. If that file is absent, the instructions call for generating Skill files. The actual authentication and security constraints therefore cannot be reviewed from this material alone.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.

Before invoking an API method, the Skill instructs the agent to inspect command help and the method schema, then construct parameters from that schema.

View source
SKILL.md:43In the instructionsOpen original file
Before calling any API method, inspect it:```bash# Browse resources and methodsgws sheets --help# Inspect a method's required params, types, and defaultsgws schema sheets.<resource>.<method>```
SKILL.md:53In the instructionsOpen original file
Use `gws schema` output to build your `--params` and `--json` flags.
Start here · InstructionsSKILL.md
gws-sheets
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:18In the instructionsOpen original file
```bashgws sheets <resource> <method> [flags]
SKILL.md:45In the instructionsOpen original file
```bash# Browse resources and methods
Connect to websites
SKILL.md:33In the instructionsOpen original file
  - `batchUpdate` — Applies one or more updates to the spreadsheet. Each request is validated before being applied. If any request is not valid then the entire request will fail and nothing will be applied. Some requests have replies to give you some information about how they are applied. The replies will mirror the requests. For example, if you applied 4 updates and the 3rd one had a reply, then the response will have 2 empty replies, the actual reply, and another empty reply, in that order.  - `create` — Creates a spreadsheet, returning the newly created spreadsheet.
SKILL.md:35In the instructionsOpen original file
  - `create` — Creates a spreadsheet, returning the newly created spreadsheet.  - `get` — Returns the spreadsheet at the given ID. The caller must specify the spreadsheet ID. By default, data within grids is not returned. You can include grid data in one of 2 ways: * Specify a [field mask](https://developers.google.com/workspace/sheets/api/guides/field-masks) listing your desired fields using the `fields` URL parameter in HTTP * Set the includeGridData URL parameter to true.  - `getByDataFilter` — Returns the spreadsheet at the given ID. The caller must specify the spreadsheet ID. For more information, see [Read, write, and search metadata](https://developers.google.com/workspace/sheets/api/guides/metadata). T …
SKILL.md:36In the instructionsOpen original file
  - `get` — Returns the spreadsheet at the given ID. The caller must specify the spreadsheet ID. By default, data within grids is not returned. You can include grid data in one of 2 ways: * Specify a [field mask](https://developers.google.c …  - `getByDataFilter` — Returns the spreadsheet at the given ID. The caller must specify the spreadsheet ID. For more information, see [Read, write, and search metadata](https://developers.google.com/workspace/sheets/api/guides/metadata). This method differs from GetSpreadsheet in that it allows selecting which subsets of spreadsheet data to return by specifying a dataFilters parameter. Multiple DataFilters can be specified.  - `developerMetadata` — Operations on the 'developerMetadata' resource
Lines read
55
File checksum (to compare versions)
2c7969cf753700aa63f4dd3d334e9751ff781363896fc91a65d0b3f2c0f17e9f