Google Sheets
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: google-sheets Version: 1.0.8 The skill bundle provides a legitimate integration for Google Sheets via the Maton API proxy (api.maton.ai). It contains comprehensive documentation and code examples (Python, JavaScript, CLI) for managing spreadsheet data and OAuth connections. No evidence of malicious intent, data exfiltration, or prompt injection was found in SKILL.md or _meta.json.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If authorized, the agent can update spreadsheet data, create sheets, and apply formatting.
The skill can perform meaningful changes to Google Sheets content, which is expected for its purpose but still high-impact if used on the wrong spreadsheet or range.
Read and write spreadsheet values, create sheets, apply formatting, and perform batch operations.
Approve write actions only after checking the spreadsheet ID, range, account connection, and intended effect.
A connected Google account gives the skill access to Sheets resources allowed by the OAuth grant.
The skill depends on delegated Google OAuth access and a Maton API key, which is appropriate for Google Sheets access but grants account-level authority over connected Sheets resources.
Maton proxies requests to `sheets.googleapis.com` and automatically injects your OAuth token.
Use the least-privileged Google account or connection available, and remove unused Maton connections when no longer needed.
Installing a global CLI can affect the local environment if the package source is not trusted.
The documented setup includes installing an external CLI globally. This is user-directed and purpose-aligned, but users should still verify package provenance before installation.
npm install -g @maton-ai/cli
Install the Maton CLI only from trusted package sources and review the package or vendor before using it.
Spreadsheet contents and metadata accessed through the skill may be visible to or processed by the Maton service according to its policies.
Requests to Google Sheets are routed through Maton's API gateway, so spreadsheet request and response data pass through an external provider rather than directly to Google.
Base URL
```
https://api.maton.ai/google-sheets/{native-api-path}
```Use this skill only for spreadsheets you are comfortable accessing through Maton's managed OAuth gateway, and review Maton's privacy/security terms for sensitive data.