onboard

SUSPICIOUS: The stated purpose matches the capabilities, and the Google/Slack data flows are plausible for onboarding, but the skill’s trusted computing base is an unverified local script with access to privileged credentials and authority to create accounts and send credentials. This is high operational risk rather than confirmed malware.