Google Sheets

PassAudited by VirusTotal on May 3, 2026.

Overview

Type: OpenClaw Skill Name: google-sheets-spreadsheets Version: 0.1.0 The skill bundle provides a legitimate interface for Google Sheets automation via the ClawLink integration hub. The SKILL.md file contains clear instructions for the AI agent to follow safety protocols, such as requiring user confirmation before modifying data and protecting user credentials. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If approved, the agent may change, clear, or delete spreadsheet data and structure, which could affect personal or business records.

Why it was flagged

The skill can perform data-changing and potentially destructive spreadsheet actions, but it explicitly requires preview and user confirmation before such writes.

Skill content
For updates, appends, clears, sheet creation or deletion, structural edits, formatting changes, or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user.
Recommendation

Review previews carefully before confirming edits, and keep backups or version history for important spreadsheets.

What this means

The connected service may be able to access spreadsheets according to the Google permissions the user grants.

Why it was flagged

The skill requires delegated Google account authorization through ClawLink so it can access Google Sheets on the user's behalf.

Skill content
ClawLink's hosted page runs the Google account connection flow — the user clicks through Google sign-in and consent.
Recommendation

Connect only an appropriate Google account, review the requested Google permissions, and revoke access when no longer needed.

What this means

Actual tool execution and credential handling depend on the ClawLink plugin and service, not only this SKILL.md file.

Why it was flagged

The skill depends on an external plugin for runtime behavior and credentials; that plugin is not part of the instruction-only artifact scanned here.

Skill content
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Recommendation

Install the plugin only from the named trusted source and review ClawLink's verification/source links before connecting accounts.

What this means

Requests, tool results, and credential-related flows may involve ClawLink in addition to Google Sheets.

Why it was flagged

Spreadsheet operations are mediated through a hosted integration gateway, so users should understand the external service boundary.

Skill content
Powered by ClawLink, an integration hub for OpenClaw that handles hosted connection flows and credentials
Recommendation

Avoid using the integration with highly sensitive spreadsheets unless you trust ClawLink's handling of data and credentials.