Spreadsheet Automation
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This instruction-only skill is coherent Google Sheets automation guidance, with no installable code, but users should be careful when approving sheet access or connecting Sheets to other services.
This appears safe to install as an instruction-only guide. Before following its advice, be deliberate about which spreadsheets you connect, what third-party services you integrate, and whether customer or business data should be stored in Google Sheets.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may build automations that fetch data from websites, APIs, or other spreadsheets and potentially rely on or share that data.
The skill teaches connecting Sheets to outside sources, which is expected for spreadsheet automation but can expose or transfer data if implemented carelessly.
Pull data from external sources (APIs, other sheets, web scraping)
Review each external connection, avoid sending sensitive data unnecessarily, and test automations on non-critical sheets first.
A spreadsheet you authorize may read data from another spreadsheet within the approved range.
The IMPORTRANGE guidance requires the user to grant one spreadsheet access to another spreadsheet, which is legitimate but changes data-access boundaries.
First time, you need to approve access (click "Allow access" when prompted)
Only approve access for trusted spreadsheets, verify the source spreadsheet URL and range, and avoid granting access to highly sensitive sheets unless necessary.
Customer or business records could remain in shared spreadsheets and be reused by formulas, dashboards, or automations.
The skill suggests using Sheets as a persistent business database containing personal or customer information.
Example: Simple CRM in Sheets ... Columns: Name, Email, Company, Source, Date Added
Use appropriate sharing controls, avoid storing unnecessary personal data, and keep backups or version history for important workflows.