collaborating-with-gemini

SUSPICIOUS: the skill’s purpose is coherent and the Gemini CLI provenance appears official, so this is not malware-like or a fake installer. However, it delegates workspace and network-capable actions to a second agent without hard enforcement, making the skill medium-high risk due to indirect prompt injection, unintended file writes, and possible exposure of workspace data to external AI services.