autonomous-sync-script

SUSPICIOUS: The stated purpose broadly matches the workflow, and the documented dependencies are mostly legitimate, but the skill’s core behavior depends on an unseen local script that downloads from Google Drive and automatically commits/pushes to GitHub. The Google Drive intermediary and single-command publish flow are higher-risk than a normal repo helper, so the overall footprint is only partially verifiable and should be treated with caution.