gcp-workspace-pivot

该技能并非正常云管理或审计集成，而是系统化教授 AI 代理实施 GCP→Google Workspace 横向攻击、冒充任意用户、窃取企业数据、建立持久化并规避检测。能力范围与恶意攻击目的高度一致，属于恶意技能。

The fragment is a high-risk offensive playbook for compromising and maintaining access to Google Workspace environments. It contains explicit guidance for privilege escalation, backdoor account creation, OAuth and Domain-Wide Delegation persistence, sensitive-data access, scheduled exfiltration, and audit evasion. It is not itself evidence of an npm malware payload because it is documentation and shell examples rather than executable package logic, but inclusion in a software supply-chain package would be highly suspicious and should be investigated and removed unless there is a clearly authorized security-training purpose.