pp-workspace-admin

SUSPICIOUS: The skill’s capabilities mostly align with Google Workspace administration, but it expands trust by installing and invoking a third-party CLI that receives Workspace credentials and can take powerful admin actions. Same-org npm/GitHub provenance lowers malware concern, yet unpinned binary install, credential forwarding, optional webhook egress, and high-impact automation make this a medium-to-high security risk rather than benign.