add-gmail-tool

SUSPICIOUS: the skill is internally coherent and mostly uses official/expected endpoints, but it expands the agent with high-impact Gmail read/write/send powers and relies on a third-party MCP CLI plus gateway-side credential injection. This is not confirmed malware, yet the combination of external CLI trust, credential forwarding, writable mounts, and autonomous email actions makes it medium-high security risk.