skills/gemini-cli-extensions/workspace/google-sheets/Snyk

google-sheets

Warn

Audited by Snyk on Mar 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to search and read Google Sheets using drive.search and sheets.getText / sheets.getRange (SKILL.md), which can ingest arbitrary, user-generated or public spreadsheet content from third-party Google Drive sources that could contain malicious instructions influencing agent actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Mar 30, 2026, 12:23 AM

Issues

1