googlesheets-automation
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Google Sheets which could contain malicious instructions.
- Ingestion points: Data is ingested through tools like GOOGLESHEETS_BATCH_GET, GOOGLESHEETS_VALUES_GET, and GOOGLESHEETS_LOOKUP_SPREADSHEET_ROW as described in SKILL.md.
- Boundary markers: There are no instructions to use delimiters or ignore embedded prompts when processing spreadsheet content.
- Capability inventory: The skill provides broad capabilities including data modification (GOOGLESHEETS_BATCH_UPDATE), structural changes (GOOGLESHEETS_DELETE_DIMENSION), and connection management.
- Sanitization: No sanitization or validation steps are defined for data retrieved from external spreadsheets.
- [EXTERNAL_DOWNLOADS]: The skill setup requires adding an external MCP server endpoint (https://rube.app/mcp). This establishes a dependency on an external service for tool definitions and execution, which is an unverified third-party source.
Audit Metadata