gog

SUSPICIOUS: the skill is broadly aligned with its stated Google Workspace purpose, but it depends on an external CLI that receives OAuth secrets/tokens and can take real-world actions like sending mail and editing data. The main concern is install provenance mismatch in the tap metadata plus credential forwarding to third-party executable code; data flows otherwise appear consistent with official Google service usage.