gpd-cli-usage

SUSPICIOUS: the stated purpose is coherent, but the skill centers a third-party `gpd` CLI and forwards Google service-account credentials into it. There is no clear malicious behavior or non-Google data sink in the skill text, yet the trust boundary is larger than necessary and the ecosystem evidence includes mutable installer patterns, so this is a medium-risk skill rather than benign.