gws-korean-setup

SUSPICIOUS. The skill is mostly coherent with its stated setup-guide purpose and uses official Google/npm distribution paths, so it does not look malicious. Risk comes from download-and-execute installation steps, normalization of bypassing the Google unverified-app warning, and especially the transitive installation of another skill via npx skills add, which expands trust beyond a simple local setup guide.