Security audit

gspread-sheets

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Google Sheets automation guide, but users should apply least-privilege credentials and be careful with destructive sheet operations.

Before installing or using this skill, use a dedicated virtual environment, pin dependency versions for production, store the service-account key securely, share only the specific spreadsheets the service account needs, prefer narrower OAuth scopes where they work, and require explicit confirmation before clearing, overwriting, or deleting sheet data.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:10
Finding: Unpinned Third-Party Dependencies
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:25
Finding: Excessive Google Drive OAuth Scope
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill requests both Sheets and full Google Drive OAuth scopes even though the documented functionality is centered on spreadsheet access. Granting drive access expands the credential’s reach beyond the stated need, increasing blast radius if the service account key is exposed or the skill is misused. In this skill context, the issue is more dangerous because the examples normalize broad service-account permissions for automation workflows.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The documentation includes destructive operations such as ws.clear(), batch_clear, worksheet deletion, and overwrite patterns without any caution, confirmation guidance, or backup advice. In an agent skill, this can lead to accidental bulk data loss because users or downstream automation may invoke these examples directly against production spreadsheets. The skill context makes this more dangerous because it is explicitly designed for batch operations, so mistakes can affect large amounts of data quickly.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.