gemini-codebase-onboard

SUSPICIOUS. The core purpose is coherent: a codebase-onboarding skill using the official Gemini CLI to analyze full repositories. The main risks are broad repository exfiltration to an external model, unverified local wrapper scripts, and overbroad local path access (`D:\Projects\*`). No strong evidence of credential theft, malicious redirection, or deceptive payload execution was found.