Claude security directory
Rockhopper
Published by Rockhopper Inc.
High risk
Rockhopper - spreadsheet audit, approvals, and AI-agent governance for Excel & Google Sheets Rockhopper tracks exactly who - human or AI agent - changed what in a spreadsheet, and adds review/approval workflows on top. Use it for: Attribution & history - see which version of a file had AI-made edits vs. human edits; pull cell-level or metric-level change history across versions; surface uncommitted ("unattributed") changes currently sitting in a file. Versions - list version history for a file, or commit current changes as a new version. Reviews & approvals - create, approve, or cancel a review request for a specific version, so changes go through sign-off before they're final. Comments - read, add, reply to, and resolve comments and discussion threads on a file, including the latest conversation tied to a specific file. File management - search enrolled files by name, comment text, or version notes; rename a file. Trigger this when the user asks who changed a spreadsheet, whether an edit was made by AI or a person, wants to compare periods/versions, needs to approve or request approval for a file, wants to see comments or discussion on a spreadsheet, or names Rockhopper directly. Only works on files already enrolled in the user's Rockhopper workspace (Microsoft Excel or Google Sheets) - it doesn't edit cell data or formulas directly.
Security assessment
Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.
- Can send messages as you: This connector can post messages, emails, or chat replies on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.
- Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
- Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
- Sends your data to outside companies: Anything you share with this connector flows through one or more third-party services. Those companies see, store, and may use the data according to their own policies.
Available capabilities
This add-on exposes 16 tools or capabilities.
- add_comment
- approve_review
- cancel_review
- create_review_request
- create_version
- discard_changes
- get_cell_history
- get_file_comments
- get_file_versions
- get_reviews
- get_unattributed_changes
- list_files
- rename_file
- reply_to_comment
- resolve_comment
- search_files
The interactive security report will load automatically.