granola

SUSPICIOUS. The skill’s purpose is coherent, but its actual footprint depends on a personal wrapper CLI with weak provenance instead of Granola’s official direct MCP path. That wrapper likely handles local auth/session data and meeting transcripts, making the access scope and supply-chain trust disproportionate to a simple meeting-notes skill.