google-drive-automation

SUSPICIOUS: The skill’s Google Drive capabilities fit its stated purpose, and the Composio/Rube relationship appears legitimate. However, the setup is inconsistent with current official documentation: it relies on a discontinued Rube MCP endpoint, uses legacy tool names, and claims no API key is needed despite current Composio docs showing API-key-based MCP setup. Data also routes through a Composio intermediary and temporary storage, which is expected for this platform but expands trust scope. No evidence of confirmed malware or hidden exfiltration was found.