google-drive-automation

SUSPICIOUS: the skill's Google Drive capabilities match its stated purpose, but it routes data and account actions through a third-party MCP/OAuth layer and uses provider-managed staging storage. The main issues are medium trust and data-flow risk, plus a documentation inconsistency around 'no API keys needed' versus current Composio MCP setup docs; this is not confirmed malware.