google-sheets-automation

SUSPICIOUS: the skill’s Sheets read/write capability matches its stated purpose, but trust and data-flow details are weak. The main concerns are full OAuth access handled by community repo scripts, unpinned install from a personal publisher, and an unclear token-refresh path that may route credentials through an intermediary instead of standard Google endpoints.