Security audit
Google Sheets
Security checks across malware telemetry and agentic risk
Overview
This is a coherent Google Sheets integration skill, but users should avoid exposing their Maton API key in terminal output or shared logs.
Install only if you trust Maton with access to the Google Sheets account you connect. Treat MATON_API_KEY as a secret: do not print it in shared terminals, screenshots, logs, or support chats. Confirm spreadsheet IDs, ranges, connected accounts, and intended effects before allowing write, clear, delete, or batch update operations.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.