gkeep

SUSPICIOUS. The skill's note-management capabilities match its stated purpose, but install and trust signals are inconsistent: the skill points to one project while requiring a different third-party CLI, and it forwards Google credentials to that CLI for an unofficial API. This is not confirmed malware, but it poses meaningful supply-chain and credential-handling risk.

This postinstall hook creates a Python virtual environment and automatically installs Python dependencies. That pattern allows remote code execution and other malicious actions via Python package install scripts or malicious packages listed in requirements.txt. You should treat this as high security risk until you review the requirements.txt contents and the package sources. Recommended mitigations: inspect and pin all entries in requirements.txt, avoid running the install script (npm install --ignore-scripts) or run in an isolated environment, and prefer vendorizing or explicitly specifying trusted package hashes/sources.