googlesheets

Security Findings (66)

• HighAS-002

  ⚠️Excessive Permissions ×5

  tool declares exec permission

  GOOGLESHEETS_EXECUTE_SQLGOOGLESHEETS_QUERY_TABLE

  tool declares network permission

  GOOGLESHEETS_QUERY_TABLEGOOGLESHEETS_SEARCH_DEVELOPER_METADATAGOOGLESHEETS_SEARCH_SPREADSHEETS

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• MediumAS-002

  ⚠️Excessive Permissions ×14

  tool declares fs permission

  GOOGLESHEETS_BATCH_UPDATEGOOGLESHEETS_BATCH_UPDATE_VALUES_BY_DATA_FILTERGOOGLESHEETS_CREATE_CHARTGOOGLESHEETS_CREATE_GOOGLE_SHEET1GOOGLESHEETS_CREATE_SPREADSHEET_COLUMNGOOGLESHEETS_CREATE_SPREADSHEET_ROWGOOGLESHEETS_DELETE_DIMENSIONGOOGLESHEETS_DELETE_SHEETGOOGLESHEETS_UPDATE_SHEET_PROPERTIESGOOGLESHEETS_UPDATE_SPREADSHEET_PROPERTIES

  tool declares db permission

  GOOGLESHEETS_EXECUTE_SQLGOOGLESHEETS_GET_TABLE_SCHEMAGOOGLESHEETS_LOOKUP_SPREADSHEET_ROWGOOGLESHEETS_QUERY_TABLE

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-002

  ⚠️Excessive Permissions ×4

  input schema exposes 13 properties (threshold: 10)

  GOOGLESHEETS_CREATE_CHART

  tool declares http permission

  GOOGLESHEETS_EXECUTE_SQLGOOGLESHEETS_UPSERT_ROWS

  input schema exposes 15 properties (threshold: 10)

  GOOGLESHEETS_FORMAT_CELL

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×5

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  GOOGLESHEETS_EXECUTE_SQLGOOGLESHEETS_QUERY_TABLEGOOGLESHEETS_SEARCH_DEVELOPER_METADATAGOOGLESHEETS_SEARCH_SPREADSHEETSGOOGLESHEETS_UPSERT_ROWS

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×38

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  GOOGLESHEETS_ADD_SHEETGOOGLESHEETS_AGGREGATE_COLUMN_DATAGOOGLESHEETS_APPEND_DIMENSIONGOOGLESHEETS_BATCH_GETGOOGLESHEETS_BATCH_UPDATEGOOGLESHEETS_BATCH_UPDATE_VALUES_BY_DATA_FILTERGOOGLESHEETS_CLEAR_BASIC_FILTERGOOGLESHEETS_CLEAR_VALUESGOOGLESHEETS_CREATE_CHARTGOOGLESHEETS_CREATE_GOOGLE_SHEET1GOOGLESHEETS_CREATE_SPREADSHEET_COLUMNGOOGLESHEETS_CREATE_SPREADSHEET_ROWGOOGLESHEETS_DELETE_DIMENSIONGOOGLESHEETS_DELETE_SHEETGOOGLESHEETS_EXECUTE_SQLGOOGLESHEETS_FIND_REPLACEGOOGLESHEETS_FIND_WORKSHEET_BY_TITLEGOOGLESHEETS_FORMAT_CELLGOOGLESHEETS_GET_SHEET_NAMESGOOGLESHEETS_GET_SPREADSHEET_BY_DATA_FILTERGOOGLESHEETS_GET_SPREADSHEET_INFOGOOGLESHEETS_GET_TABLE_SCHEMAGOOGLESHEETS_INSERT_DIMENSIONGOOGLESHEETS_LIST_TABLESGOOGLESHEETS_LOOKUP_SPREADSHEET_ROWGOOGLESHEETS_QUERY_TABLEGOOGLESHEETS_SEARCH_DEVELOPER_METADATAGOOGLESHEETS_SEARCH_SPREADSHEETSGOOGLESHEETS_SET_BASIC_FILTERGOOGLESHEETS_SHEET_FROM_JSONGOOGLESHEETS_SPREADSHEETS_SHEETS_COPY_TOGOOGLESHEETS_SPREADSHEETS_VALUES_APPENDGOOGLESHEETS_SPREADSHEETS_VALUES_BATCH_CLEARGOOGLESHEETS_SPREADSHEETS_VALUES_BATCH_CLEAR_BY_DATA_FILTERGOOGLESHEETS_SPREADSHEETS_VALUES_BATCH_GET_BY_DATA_FILTERGOOGLESHEETS_UPDATE_SHEET_PROPERTIESGOOGLESHEETS_UPDATE_SPREADSHEET_PROPERTIESGOOGLESHEETS_UPSERT_ROWS

  Fix: Review and remediate the identified issue.