gemini-ask

SUSPICIOUS: the skill's purpose is coherent, but its footprint is riskier than a normal Gemini integration because it repeatedly executes a mutable remote installer and routes user prompts through a third-party daemon/extension tied to the browser session instead of official Gemini APIs. This looks more like elevated supply-chain and intermediary data-flow risk than confirmed malware.