gworkspace

SUSPICIOUS: the stated purpose matches Google Workspace access, but the skill delegates broad runtime-discovered actions and OAuth-mediated data access to an independent local MCP server rather than official Google MCP endpoints. That third-party trust boundary and server-defined capability surface make the skill medium-to-high risk despite no direct malware indicators in the skill text.