google-workspace-cli

SUSPICIOUS: the core Google Workspace automation purpose matches the capabilities, and install sources are same-project and publicly verifiable, so this is not malware. Risk comes from broad access to sensitive Workspace data/actions, credential forwarding into a third-party CLI, dynamic runtime API surface, and explicit transitive installation of many additional skills.