Gws Sheets Append

Google Sheets: Append a row to a spreadsheet.

Security Scan

The skill's stated purpose (append a row using the 'gws' CLI) is plausible, but the runtime instructions refer to an external shared SKILL.md for auth and global flags while declaring no required credentials — that mismatch is concerning and needs clarification before install.

Purpose & Capability

The skill calls a gws CLI to append rows, which matches the name/description. However, the SKILL.md explicitly points to ../gws-shared/SKILL.md for authentication, global flags, and security rules, yet the registry metadata declares no required environment variables or primary credential. That omission is inconsistent: a Google Sheets write operation normally requires Google credentials (API key, OAuth token, or service account), so required credentials are likely present but undeclared.

Instruction Scope

The instructions are limited to invoking 'gws sheets +append' which is in-scope, but they also instruct the agent to read ../gws-shared/SKILL.md (outside this skill's directory) for auth and rules, and to run 'gws generate-skills' if missing. That directs the agent to read other skill files and potentially write files, which expands scope beyond a self-contained append command. The SKILL.md does not list exactly which auth artifacts or env vars the agent will read or need at runtime.

Install Mechanism

This is an instruction-only skill with no install spec and no code files, so nothing will be written to disk by the skill itself. Low install risk.

Credentials

The registry metadata lists no required environment variables or primary credential, but the runtime instructions explicitly defer auth to a separate gws-shared SKILL.md. This likely means required credentials (Google OAuth tokens, service account JSON path, or CLI-stored tokens) are managed outside this skill. The absence of declared env vars is disproportionate to the likely need for Google Sheets credentials and hides which secrets the agent will access.

Persistence & Privilege

always is false and there is no explicit request for permanent presence or cross-skill configuration changes. The instruction to run 'gws generate-skills' could create files, but that is an expected operational helper rather than a privilege escalation. Still, the skill's dependence on sibling skill files slightly increases its effective reach.

What to consider before installing

Before installing, inspect the referenced ../gws-shared/SKILL.md to see exactly what authentication method and environment variables or files the gws CLI expects (service account JSON, GOOGLE_APPLICATION_CREDENTIALS, OAuth tokens, etc.). Verify the provenance of the 'gws' binary (where it comes from and what access it requires). Because this is a write operation, test on a non-sensitive spreadsheet and confirm the user before any append. If you are concerned about undisclosed credential access, do not install until the shared SKILL.md and any generated files are reviewed; consider restricting the agent's ability to access system files or disabling autonomous invocation for this skill until you verify its requirements.

sheets +append

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

Append a row to a spreadsheet

Usage

gws sheets +append --spreadsheet <ID>

Flags

Flag	Required	Default	Description
--spreadsheet	✓	—	Spreadsheet ID
--values	—	—	Comma-separated values (simple strings)
--json-values	—	—	JSON array of rows, e.g. '[["a","b"],["c","d"]]'
--range	—	A1	Target range in A1 notation (e.g. 'Sheet2!A1') to select a specific tab

Examples

gws sheets +append --spreadsheet ID --values 'Alice,100,true'
gws sheets +append --spreadsheet ID --json-values '[["a","b"],["c","d"]]'
gws sheets +append --spreadsheet ID --range "Sheet2!A1" --values 'Alice,100'

Tips

• Use --values for simple single-row appends.
• Use --json-values for bulk multi-row inserts.
• Use --range to append to a specific sheet tab (default: A1, i.e. first sheet).

[!CAUTION] This is a write command — confirm with the user before executing.

See Also

• gws-shared — Global flags and auth
• gws-sheets — All read and write spreadsheets commands