gps-accounts

SUSPICIOUS: the task and credential scope are broadly consistent with Google Play account management, but the skill hinges on an unverified gps CLI while the official evidence points to a differently named tool (gplay). Because credentials are passed to an unverifiable binary and no provenance/install path is supplied, this should be treated as high supply-chain risk rather than confirmed malware.