cold-start

SUSPICIOUS. The skill’s overall purpose matches its capabilities, and its strongest safety property is avoiding raw agent-held OAuth tokens. However, it routes highly sensitive Gmail/Calendar/Contacts access through a third-party gateway (ClawVisor), asks for broad standing-task scope, and delegates to other skills, creating medium trust and data-flow risk even without evidence of outright malware.