gmail-workflows

SUSPICIOUS. The business purpose is coherent, but the trust boundary is not: the skill relies on an unspecified MCP server, and available evidence points to a third-party implementation that receives Google credentials and handles mailbox/Drive data. That unclear provenance and credential forwarding make the skill medium-high risk even though the documented workflows themselves are plausible.