google-workspace

SUSPICIOUS: mostly coherent Google Workspace functionality using official Google OAuth/API flows, but the optional delegation of stored Google tokens to a non-Google third-party CLI (`gws`) expands trust beyond what many users would expect. No clear exfiltration, covert behavior, or malicious pre-execution content is present; primary risk is credential forwarding/trust expansion plus real-world action capability.