google-drive

SUSPICIOUS. The skill’s capabilities match its stated Google Drive purpose and there is no installer or binary-supply-chain issue, but its core design routes all Google Drive traffic and auth through Maton-controlled proxy/control endpoints instead of Google’s official API endpoints. That third-party mediation is coherent with a managed OAuth gateway, yet it materially increases trust and data exposure risk compared with direct Google API use.