Claude security directory

Rockhopper

Published by Rockhopper Inc.

High risk

Rockhopper - spreadsheet audit, approvals, and AI-agent governance for Excel & Google Sheets Rockhopper tracks exactly who - human or AI agent - changed what in a spreadsheet, and adds review/approval workflows on top. Use it for: Attribution & history - see which version of a file had AI-made edits vs. human edits; pull cell-level or metric-level change history across versions; surface uncommitted ("unattributed") changes currently sitting in a file. Versions - list version history for a file, or commit current changes as a new version. Reviews & approvals - create, approve, or cancel a review request for a specific version, so changes go through sign-off before they're final. Comments - read, add, reply to, and resolve comments and discussion threads on a file, including the latest conversation tied to a specific file. File management - search enrolled files by name, comment text, or version notes; rename a file. Trigger this when the user asks who changed a spreadsheet, whether an edit was made by AI or a person, wants to compare periods/versions, needs to approve or request approval for a file, wants to see comments or discussion on a spreadsheet, or names Rockhopper directly. Only works on files already enrolled in the user's Rockhopper workspace (Microsoft Excel or Google Sheets) - it doesn't edit cell data or formulas directly.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Can send messages as you: This connector can post messages, emails, or chat replies on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Sends your data to outside companies: Anything you share with this connector flows through one or more third-party services. Those companies see, store, and may use the data according to their own policies.

Available capabilities

This add-on exposes 16 tools or capabilities.

  • add_comment
  • approve_review
  • cancel_review
  • create_review_request
  • create_version
  • discard_changes
  • get_cell_history
  • get_file_comments
  • get_file_versions
  • get_reviews
  • get_unattributed_changes
  • list_files
  • rename_file
  • reply_to_comment
  • resolve_comment
  • search_files

The interactive security report will load automatically.