Google Sheets

AdvisoryAudited by Static analysis on May 7, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If authorized, the agent can update spreadsheet data, create sheets, and apply formatting.

Why it was flagged

The skill can perform meaningful changes to Google Sheets content, which is expected for its purpose but still high-impact if used on the wrong spreadsheet or range.

Skill content
Read and write spreadsheet values, create sheets, apply formatting, and perform batch operations.
Recommendation

Approve write actions only after checking the spreadsheet ID, range, account connection, and intended effect.

What this means

A connected Google account gives the skill access to Sheets resources allowed by the OAuth grant.

Why it was flagged

The skill depends on delegated Google OAuth access and a Maton API key, which is appropriate for Google Sheets access but grants account-level authority over connected Sheets resources.

Skill content
Maton proxies requests to `sheets.googleapis.com` and automatically injects your OAuth token.
Recommendation

Use the least-privileged Google account or connection available, and remove unused Maton connections when no longer needed.

What this means

Installing a global CLI can affect the local environment if the package source is not trusted.

Why it was flagged

The documented setup includes installing an external CLI globally. This is user-directed and purpose-aligned, but users should still verify package provenance before installation.

Skill content
npm install -g @maton-ai/cli
Recommendation

Install the Maton CLI only from trusted package sources and review the package or vendor before using it.

What this means

Spreadsheet contents and metadata accessed through the skill may be visible to or processed by the Maton service according to its policies.

Why it was flagged

Requests to Google Sheets are routed through Maton's API gateway, so spreadsheet request and response data pass through an external provider rather than directly to Google.

Skill content
Base URL

```
https://api.maton.ai/google-sheets/{native-api-path}
```
Recommendation

Use this skill only for spreadsheets you are comfortable accessing through Maton's managed OAuth gateway, and review Maton's privacy/security terms for sensitive data.