Skip to content
Report library
Purpose / Documents

Gws Sheets Read Skill Security Audit

What the author says it does (original text)

Google Sheets: Read values from a spreadsheet.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

A missing dependency triggers instructions to generate Skill files

Source references: 1
What we found

If `../gws-shared/SKILL.md` is absent, the Skill directs the agent to run `gws generate-skills`. This is not directly necessary to read a spreadsheet and would generate local Skill files whose location and contents are not supplied for this audit.

Why this matters

The command may create or update persistent local files. The provided material does not establish the exact targets, whether existing files can be overwritten, or what instructions will be generated.

What this evidence establishes

The line does instruct running `gws generate-skills` when the shared prerequisite is missing, which may create local files. However, this is a conditional, manually invoked setup step—not behavior automatically triggered by the read command. Because the `gws` implementation, output paths, generated contents, and shared skill are not provided, it is unclear whether it only creates required documentation or makes broader-than-expected file changes. Before allowing it, the user can ask for the exact output manifest and restrict writable locations.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill's main operation calls `gws sheets +read` to retrieve values from a user-specified spreadsheet ID and range.

View source
SKILL.md:23In the instructionsOpen original file
```bashgws sheets +read --spreadsheet <ID> --range <RANGE>```
SKILL.md:30In the instructionsOpen original file
|------|----------|---------|-------------|| `--spreadsheet` | ✓ | — | Spreadsheet ID || `--range` | ✓ | — | Range to read (e.g. 'Sheet1!A1:B2') |

The Skill states that its spreadsheet operation is read-only, but delegates authentication, global flags, and security rules to a neighboring Skill that is not included in the supplied material.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
SKILL.md:42In the instructionsOpen original file
- Read-only — never modifies the spreadsheet.- For advanced options, use the raw values.get API.
Start here · InstructionsSKILL.md
gws-sheets-read
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:22In the instructionsOpen original file
```bashgws sheets +read --spreadsheet <ID> --range <RANGE>
SKILL.md:35In the instructionsOpen original file
```bashgws sheets +read --spreadsheet ID --range "Sheet1!A1:D10"
Lines read
49
File checksum (to compare versions)
8efd236d1f9809677661edabcabb80fa1682466905e77f48652af83d634ba789