blog

Mostly purpose-aligned and not overtly malicious, but it has a medium security footprint due to broad orchestration, local credential/config access, and especially optional forwarding of Google credentials to third-party MCP code. Overall classification: SUSPICIOUS rather than benign, driven by credential-forwarding and expanded trust boundaries, not by confirmed exfiltration or malware.