inbox-commander

SUSPICIOUS: The skill is broadly aligned with inbox triage and uses official Google/Brex paths where described, but it combines autonomous mailbox actions with ingestion of untrusted email content and optionally routes read access through a non-official third-party CLI (gscli). No clear credential theft or malicious exfiltration is present, yet the trust boundary around gscli and the automation scope make it medium risk rather than benign.