Skip to content
Report library
Purpose / Data analysis

Recipe Compare Sheet Tabs Skill Security Audit

What the author says it does (original text)

Read data from two tabs in a Google Sheet to compare and identify differences.

Independent security check

Low-risk issues found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Low risk

Open-ended ranges read every populated row in columns A–D of both tabs

Source references: 3
What we found

Both read commands use `A1:D` without an ending row, so they may retrieve all existing data in those four columns rather than only the records needed for the comparison. The results enter the tool and agent processing context.

Why this matters

If those columns contain personal, financial, or other confidential material, unnecessary data may also be processed. The supplied source does not show the data being externally transmitted or publicly shared.

These are active steps, not a warning or a hypothetical example. Both commands use the open-ended range `A1:D`, so they can read every populated row in columns A–D of the January and February tabs; personal, financial, or business data not needed for the comparison would also enter the tool and agent workflow. Reading both tabs matches the stated comparison purpose, but the scope is not minimized. A user can ask the author to document the required data boundary or restrict each range to explicit rows and columns before running it.

SKILL.md:24In the instructionsOpen original file
1. Read the first tab: `gws sheets +read --spreadsheet SHEET_ID --range "January!A1:D"`2. Read the second tab: `gws sheets +read --spreadsheet SHEET_ID --range "February!A1:D"`3. Compare the data and identify changes
Show 2 other places
SKILL.md:25In the instructionsOpen original file
1. Read the first tab: `gws sheets +read --spreadsheet SHEET_ID --range "January!A1:D"`2. Read the second tab: `gws sheets +read --spreadsheet SHEET_ID --range "February!A1:D"`3. Compare the data and identify changes
SKILL.md:26In the instructionsOpen original file
2. Read the second tab: `gws sheets +read --spreadsheet SHEET_ID --range "February!A1:D"`3. Compare the data and identify changes
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

The Skill requires `gws-sheets` and a local `gws` command; the supplied source contains no installation, authentication, or permission-configuration steps.

View source
SKILL.md:9In the instructionsOpen original file
    domain: "productivity"    requires:      bins:        - gws      skills:        - gws-sheets---
SKILL.md:18In the instructionsOpen original file
> **PREREQUISITE:** Load the following skills to execute this recipe: `gws-sheets`

The implemented workflow reads columns A through D from the `January` and `February` tabs of one spreadsheet and then compares changes; the supplied content contains no command to write, delete, or share spreadsheet data.

View source
SKILL.md:24In the instructionsOpen original file
1. Read the first tab: `gws sheets +read --spreadsheet SHEET_ID --range "January!A1:D"`2. Read the second tab: `gws sheets +read --spreadsheet SHEET_ID --range "February!A1:D"`3. Compare the data and identify changes
Start here · InstructionsSKILL.md
recipe-compare-sheet-tabs
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
28
File checksum (to compare versions)
5fac9b4fedeef532c842158497670abd226eaf18842121c7b91ccb2db0b90c1b