sheets-automation

SUSPICIOUS. The skill's business-automation capabilities are broadly consistent with its stated purpose, and the provided content is mostly documentation rather than executable code. The main concern is trust and data-flow integrity around the non-first-party-looking 'google-workspace-mcp' dependency: it could place Google Workspace credentials and sheet data behind a community wrapper instead of Google's documented first-party MCP endpoints. Risk is moderate rather than malicious because there is no direct download-execute chain, no obvious exfiltration endpoint, and the outbound Slack/email/CRM actions are aligned with the stated use case.