google-workspace-workflow

SUSPICIOUS: The skill’s overall purpose matches Google Workspace automation, and its primary data flows are consistent with that purpose. However, risk is elevated by curl|sh installation, transitive skill installation, plaintext credential persistence, and broad authenticated browser/session access that can perform real-world actions like email sending. This looks more like a high-risk but purpose-aligned workflow than confirmed malicious behavior.