google-workspace-setup

SUSPICIOUS: the skill’s purpose and capabilities mostly align, but its trust model is weak. It asks the agent to install and run a third-party personal MCP bridge with broad Google OAuth access, and the install instructions do not match the cited project’s official docs. No confirmed malware or explicit exfiltration is shown, but the supply-chain and credential-forwarding risks are substantial.