md-to-gdoc

SUSPICIOUS: the skill’s core purpose is legitimate and its scope is mostly proportionate, but it forwards Google account authority to an external CLI and cites a repo/command path that does not cleanly match current official gog documentation. This is not confirmed malicious, but the install/provenance ambiguity and third-party credential delegation make it medium risk.