← Back to Skills Marketplace
ivangdavila

Spreadsheet

by Iván · GitHub ↗ · v1.0.0
linuxdarwinwin32 ✓ Security Clean
4013
Downloads
2
Stars
34
Active Installs
1
Versions
Install in OpenClaw
/install spreadsheet
Description
Read, write, and analyze tabular data with schema memory, format preservation, and multi-platform support.
Usage Guidance
Install only if you want an agent to help with spreadsheet reads and writes. Use a dedicated Google service account, share only the specific spreadsheets it needs, protect and rotate the credential file, and periodically review ~/spreadsheet/ because it may retain sheet IDs, file paths, schemas, and preferences.
Capability Analysis
Type: OpenClaw Skill Name: spreadsheet Version: 1.0.0 The skill is classified as suspicious due to its direct handling of sensitive API credentials (`credentials.json`) for Google Sheets authentication, as explicitly instructed in `google-sheets.md` and referenced in `memory-template.md`. While necessary for the skill's functionality, this introduces a high-risk operation. Although `SKILL.md` states the skill 'NEVER stores passwords, API keys', it instructs the agent to load and use a file containing them, creating a potential vulnerability if the agent is compromised or if file paths are manipulated (e.g., via path traversal). The skill also performs extensive file I/O operations on user-provided paths, which, without robust input sanitization, could lead to arbitrary file read/write vulnerabilities.
Capability Assessment
Purpose & Capability
The skill reads, writes, and analyzes Google Sheets, Excel, and CSV data, which matches its stated spreadsheet purpose; remote write/append authority is sensitive but expected for this functionality.
Instruction Scope
The artifacts explicitly limit use to user-requested spreadsheets and user-provided paths, and state that sheets should not be accessed without user request.
Install Mechanism
The package is instruction-only markdown with no executable scripts, bundled binaries, automatic installs, or remote startup behavior.
Credentials
Google Sheets support uses a local service-account credential file with spreadsheet API scope and requires sharing target sheets with the service account; this is proportionate but should be tightly permissioned.
Persistence & Privilege
The skill creates persistent memory under ~/spreadsheet/ for preferences, sheet IDs, paths, schemas, and project metadata; this is disclosed and bounded, with no background worker or self-modification.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install spreadsheet
  3. After installation, invoke the skill by name or use /spreadsheet
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Slug spreadsheet
Version 1.0.0
License
All-time Installs 34
Active Installs 34
Total Versions 1
Frequently Asked Questions

What is Spreadsheet?

Read, write, and analyze tabular data with schema memory, format preservation, and multi-platform support. It is an AI Agent Skill for Claude Code / OpenClaw, with 4013 downloads so far.

How do I install Spreadsheet?

Run "/install spreadsheet" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Spreadsheet free?

Yes, Spreadsheet is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Spreadsheet support?

Spreadsheet is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).

Who created Spreadsheet?

It is built and maintained by Iván (@ivangdavila); the current version is v1.0.0.

💬 Comments