google-sheets

SUSPICIOUS: the skill’s stated purpose matches Google Sheets operations, but its actual design routes all credentials and spreadsheet traffic through Maton-controlled proxy and OAuth endpoints instead of Google’s official API/auth endpoints. That third-party mediation is explicit rather than hidden, so this is not confirmed malware, but it creates meaningful credential-forwarding and data-flow risk beyond a direct Google Sheets integration.