Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Google Sheets gateway skill, but users should treat it as powerful because it can read, change, clear, and delete spreadsheet content through Maton Gateway.
Install only if you trust Maton Gateway for the spreadsheets involved. Use least-privilege credentials, avoid sensitive sheets unless your organization approves the gateway, and require explicit review before running clear, delete, batch update, or formula-writing commands.
The skill routes spreadsheet access through an external gateway service but does not disclose data-handling, privacy, retention, or trust-boundary implications. Users may unknowingly send sensitive spreadsheet contents and access tokens through a third-party endpoint, creating confidentiality and compliance risks.
The documented read operation transmits spreadsheet identifiers, requested ranges, and returned sheet contents to an external service endpoint, which is a real data egress path. While this is the intended function of the integration, it still represents a security-relevant boundary crossing that can expose sensitive business data if users assume direct Google access rather than proxying through a gateway.
📄 Operations (Generic Placeholders)
1. Read Values
curl "https://gateway.maton.ai/google-sheets/v4/spreadsheets/{SPREADSHEET_ID}/values/{SHEET_NAME}!{RANGE}" \
-H "Authorization: Bearer $MATON_API_KEY"
The skill documents destructive operations such as clearing values, deleting sheets, and structural batch updates without warning the user about irreversible changes or recommending confirmation before execution. In an agent context, this increases the chance of accidental data loss because an automated system may carry out these actions directly from a prompt without human review.
No suspicious patterns detected.