gooserelayvpn-android-client

SUSPICIOUS: The skill is broadly coherent with its VPN-client purpose, and the flagged go install usage is normal documentation for official Go tooling. However, it routes device traffic through custom Google Apps Script and a VPS, depends on upstream infrastructure controlled across separate GitHub owners, and references an upstream server setup that uses remote-script installation; this is not confirmed malware, but it carries meaningful security and trust risk.