google-workspace

SUSPICIOUS: The stated purpose is plausible, and the Google endpoints are official, but the skill is internally inconsistent because it declares only file-reading tools while requiring powerful browser-control capabilities. Its external Chrome MCP dependency is unspecified and likely unpinned, and the skill can use the user's ambient Google session to read or modify sensitive data. No clear credential-harvesting or third-party proxy flow is present, so this is not confirmed malware, but it carries medium risk.