google-drive

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the npm install path appears legitimate, but the core integration proxies Google Drive access through Membrane rather than using Google’s official API endpoints directly. That third-party mediation of auth and Drive requests is proportionate to the stated design yet raises medium trust and data-flow concerns, especially with an unpinned `@latest` CLI install.