google-workspace-cli

SUSPICIOUS. The skill’s purpose is coherent, but the install provenance is not: it recommends package names that do not match the cited upstream `googleworkspace/cli` project. Because the skill also expects Google OAuth and service-account-related credentials, this publisher/package mismatch creates a meaningful supply-chain and credential-forwarding risk even though the operational workflows themselves are on-purpose.