zynkr-kms

SUSPICIOUS: the core Gmail-to-KB workflow is broadly consistent with the stated purpose and uses proportionate service access, but the skill includes transitive installation from an external GitHub skill source and processes untrusted email content while retaining write privileges. Main risk is supply-chain/trust expansion and prompt-injection exposure rather than clear malicious intent.