guava-router

SUSPICIOUS. The core routing purpose matches the requested CLI installs, auth checks, Notion MCP setup, and config edits, and the main vendor CLIs come from official sources. However, the skill also drives transitive installation/update of third-party Guava plugins/skills from a non-vendor publisher, expands persistent agent permissions, and handles login/session data via helper tooling, making the overall footprint moderately risky though not clearly malicious.