{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Autosheet runs a spreadsheet agent directly in Google Sheets. Delegate formulas, charts, formatting, data restructuring, research, and bulk content or data processing. It can add, change, or remove spreadsheet content and requires OAuth access to a sheet you can edit.","did":"4b8d4ae0-c655-47ca-ae59-296a2416763b","documentation_url":"https://github.com/run-autosheet/autosheet-mcp","editorial_description":{"extended_description":"Provide a spreadsheet URL or ID and a task. Long-running jobs continue server-side; tools check status, stop work, or send follow-up instructions with the spreadsheet context. The connector also copies tabs between spreadsheets.","schema_version":1,"summary":"Autosheet runs a spreadsheet agent directly in Google Sheets.\nDelegate formulas, charts, formatting, data restructuring, research, and bulk content or data processing.\nIt can add, change, or remove spreadsheet content and requires OAuth access to a sheet you can edit."},"homepage_url":"","icon":"","id":"4b8d4ae0-c655-47ca-ae59-296a2416763b","installs":0,"last_scanned":"","license":"","long_description":"Provide a spreadsheet URL or ID and a task. Long-running jobs continue server-side; tools check status, stop work, or send follow-up instructions with the spreadsheet context. The connector also copies tabs between spreadsheets.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The description says the agent inspects, plans and performs nearly any spreadsheet task, including adding, changing or removing content and web research.","reasoning":"Concrete reads, writes, deletion, network access and formulas are not individually represented or policy-gated.","risk_type":"generic_gateway","severity":"high","title":"A prompt-driven agent hides broad spreadsheet actions","triggering_tools_or_skills":["autosheet_start_agent_google_sheets_spreadsheet","autosheet_follow_up_agent"]},{"evidence":"The description explicitly states the agent can remove content from any spreadsheet the user can edit.","reasoning":"Prompt-driven removal can destroy business records, formulas, rows, columns or sheets.","risk_type":"data_deletion","severity":"high","title":"Can remove spreadsheet content","triggering_tools_or_skills":["autosheet_start_agent_google_sheets_spreadsheet","autosheet_follow_up_agent"]},{"evidence":"The agent creates/fixes formulas and performs long-running bulk AI/web-processing jobs server-side.","reasoning":"It executes dynamic spreadsheet computation and autonomous processing against private data.","risk_type":"code_execution","severity":"high","title":"Creates and executes spreadsheet formulas/agent workflows","triggering_tools_or_skills":["autosheet_start_agent_google_sheets_spreadsheet","autosheet_follow_up_agent"]},{"evidence":"The description says new accounts start with free trial credits, implying runs consume metered credits.","reasoning":"Long-running/bulk agent work can consume paid service quota.","risk_type":"financial_transaction","severity":"high","title":"Consumes trial or paid agent credits","triggering_tools_or_skills":["autosheet_start_agent_google_sheets_spreadsheet","autosheet_follow_up_agent"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth grants edit access to any Google Sheet the user can edit; the generic agent prompt controls many hidden spreadsheet and web-research actions.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4b8d4ae0-c655-47ca-ae59-296a2416763b.json","what_it_proves":"Candidate PR #125 record identity (name \"Autosheet\", publisher, type web_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4b8d4ae0-c655-47ca-ae59-296a2416763b: complete tool_names inventory (5 tools), remote streamable-http endpoint https://mcp.autosheet.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Autosheet is a credit-consuming dynamic agent with broad edit/delete/web capabilities over Google Sheets.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:4b8d4ae0-c655-47ca-ae59-296a2416763b","reviewed_at":"2026-10-10","reviewer_notes":"Expose a bounded action plan/diff/cost preview before execution and constrain web egress.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"Autosheet","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4b8d4ae0-c655-47ca-ae59-296a2416763b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://talarian.io/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Talarian","publisher_url":"https://talarian.io/","remote_url":"https://mcp.autosheet.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Concrete reads, writes, deletion, network access and formulas are not individually represented or policy-gated.; It executes dynamic spreadsheet computation and autonomous processing against private data.","evidence":"A prompt-driven agent hides broad spreadsheet actions: The description says the agent inspects, plans and performs nearly any spreadsheet task, including adding, changing or removing content and web research. | Creates and executes spreadsheet formulas/agent workflows: The agent creates/fixes formulas and performs long-running bulk AI/web-processing jobs server-side.","manual_risk_type":"generic_gateway,code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["autosheet_start_agent_google_sheets_spreadsheet","autosheet_follow_up_agent"]},{"description":"This connector can permanently remove data or resources. Review findings: Prompt-driven removal can destroy business records, formulas, rows, columns or sheets.","evidence":"Can remove spreadsheet content: The description explicitly states the agent can remove content from any spreadsheet the user can edit.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Can remove spreadsheet content","triggering_tools":["autosheet_start_agent_google_sheets_spreadsheet","autosheet_follow_up_agent"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Long-running/bulk agent work can consume paid service quota.","evidence":"Consumes trial or paid agent credits: The description says new accounts start with free trial credits, implying runs consume metered credits.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Consumes trial or paid agent credits","triggering_tools":["autosheet_start_agent_google_sheets_spreadsheet","autosheet_follow_up_agent"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.gptforwork.com/hc/en-us/requests/new","tags":["deletes_data","network_access","oauth_required","runs_code","spends_money","web_connector"],"tools":[{"description":"","name":"autosheet_follow_up_agent","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Long-running/bulk agent work can consume paid service quota."}},{"description":"","name":"autosheet_get_agent"},{"description":"","name":"autosheet_start_agent_google_sheets_spreadsheet","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Long-running/bulk agent work can consume paid service quota."}},{"description":"","name":"autosheet_stop_agent"},{"description":"","name":"autosheet_copy_tab_from_one_spreadsheet_to_another"}],"tools_count":5,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4b8d4ae0-c655-47ca-ae59-296a2416763b","uuid":"73c2d46f-e3ab-5876-8985-8cd666e48cdf","verification_tier":"community","version":""},"query_key":"talarian autosheet","schema_version":1,"status":"match"}