granola-transcript

SUSPICIOUS: The core purpose and official Granola endpoint are coherent, but the skill depends on custom local scripts and forwards Granola bearer tokens into third-party mcporter storage/config. This is not confirmed malware, yet it introduces medium-high credential-handling and execution-trust risk beyond what a narrow transcript lookup skill should need.