google-drive

SUSPICIOUS: the skill's capabilities fit its stated Google Drive purpose, and the CLI/install path appears to be official ClawLink infrastructure via npm. However, the architecture routes credentials and Drive data through ClawLink's hosted service instead of direct Google APIs, adding a significant third-party trust and data-handling layer; combined with unpinned npx execution and write/share/delete capability, this is medium risk rather than benign.