Skip to content
skillsafebeta
← Report library
Purpose / Documents

Recipe Backup Sheet As Csv Skill Security Audit

What the author says it does (original text)

Export a Google Sheets spreadsheet as a CSV file for local backup or processing.

Independent security check

Low-risk issues found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Low risk

CSV export creates a copy outside Google Sheets access controls

Source references: 2
What we found

The workflow exports the specified file or directly reads `Sheet1` values as CSV. A CSV generally does not preserve Google Sheets sharing restrictions, protected ranges, or access auditing.

Why this matters

If the selected sheet contains personal, financial, or commercially sensitive information, the local CSV may be accessible to other local users, backup software, or subsequent processing tools.

The skill explicitly exports the sheet identified by `SHEET_ID` as CSV, or reads `Sheet1` and emits CSV, creating a separately stored and processable data copy. This occurs only when the user supplies a target sheet and the `gws` credentials can read it. It matches the stated local-backup purpose and is not hidden, but the resulting copy is no longer directly governed by the source sheet’s sharing settings. Users can ask where output is written, whether files are overwritten, and what local permissions apply, and restrict eligible sheets and destinations.

SKILL.md:21In the instructionsOpen original file
Export a Google Sheets spreadsheet as a CSV file for local backup or processing.
Show 1 other places
SKILL.md:26In the instructionsOpen original file
1. Get spreadsheet details: `gws sheets spreadsheets get --params '{"spreadsheetId": "SHEET_ID"}'`2. Export as CSV: `gws drive files export --params '{"fileId": "SHEET_ID", "mimeType": "text/csv"}'`3. Or read values directly: `gws sheets +read --spreadsheet SHEET_ID --range 'Sheet1' --format csv`
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

The documented workflow first retrieves details for a specified spreadsheet and then exports it as CSV through Google Drive; an alternative directly reads values from `Sheet1` in CSV format.

View source
SKILL.md:25In the instructionsOpen original file
1. Get spreadsheet details: `gws sheets spreadsheets get --params '{"spreadsheetId": "SHEET_ID"}'`2. Export as CSV: `gws drive files export --params '{"fileId": "SHEET_ID", "mimeType": "text/csv"}'`3. Or read values directly: `gws sheets +read --spreadsheet SHEET_ID --range 'Sheet1' --format csv`

Execution depends on the `gws` command and two additional Skills. Their implementations are absent from the provided source, so this review can confirm the dependency requirement but cannot assess their authentication, network, or file-writing behavior.

View source
SKILL.md:9In the instructionsOpen original file
    domain: "productivity"    requires:      bins:        - gws      skills:        - gws-sheets        - gws-drive---
SKILL.md:19In the instructionsOpen original file
> **PREREQUISITE:** Load the following skills to execute this recipe: `gws-sheets`, `gws-drive`
Start here · InstructionsSKILL.md
recipe-backup-sheet-as-csv
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Read files
SKILL.md:3In the instructionsOpen original file
name: recipe-backup-sheet-as-csvdescription: "Export a Google Sheets spreadsheet as a CSV file for local backup or processing."metadata:
SKILL.md:21In the instructionsOpen original file
Export a Google Sheets spreadsheet as a CSV file for local backup or processing.
Lines read
29
File checksum (to compare versions)
7957c79187facab4475fc02eb6cbf1f1cb7dbe1d62d3ad478bb8e3258cfa417c