gogcli

SUSPICIOUS: the core `gogcli` capability is aligned with the stated Google Workspace purpose and its distribution looks legitimate, but the skill expands trust to a separate `secrets` CLI for keyring-password retrieval and implicitly relies on external binaries to handle highly sensitive Google auth material. Data flow appears consistent with Google Workspace use, so this is not confirmed malware, but the multi-tool credential path and transitive trust make it a medium-risk skill.