upload-to-drive

SUSPICIOUS. The skill's purpose aligns with its capabilities, and official Google Drive MCP support exists, so this is not inherently malicious. However, the skill depends on an unspecified MCP server implementation, assumes OAuth-backed cloud access, and can make files publicly shareable; that combination creates medium risk and trust ambiguity even though the overall behavior is plausible for the stated purpose.