gws-installer

SUSPICIOUS. The skill’s purpose largely matches its actions, and the install path is tied to a real open-source project with verifiable repo/release history. But it still asks users to hand over OAuth secrets, forwards them to a third-party CLI that is not an official Google product, and normalizes approving an unverified OAuth app with broad Workspace access. This is a coherent installer, but its trust and credential-handling model is higher risk than a typical benign setup guide.