gemini

SUSPICIOUS. The skill's purpose is legitimate and the data flow to Google's Gemini service is broadly proportionate, but the installation and execution instructions are internally inconsistent: it tells users to pip install a legacy SDK while invoking a gemini CLI that the referenced package may not provide. This looks more like outdated or incorrect documentation than malware, yet the mismatch weakens trust and makes credential forwarding to the installed tool less verifiable.