google-sheets

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's spreadsheet capabilities align with its purpose and the `orth` CLI appears to be an official same-org npm tool, so there is no strong malware signal. However, all Google Sheets access is mediated through Orthogonal's platform/dashboard instead of direct Google APIs, creating a meaningful third-party data and credential-routing risk that should be understood before use.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Mar 29, 2026, 06:01 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fgoogle-sheets%2F@e7d349c5a777cf32f49d42ea989390791cf0d2a2