gws-israeli-business-sheets

SUSPICIOUS. The bookkeeping workflow itself is coherent, but the skill’s central install/auth path is not: it asks the agent to install and authenticate with a CLI package that does not match the official Google-published package name in the cited evidence. Because that package would receive Google OAuth credentials and broad sheet access, the skill has a high supply-chain and credential-forwarding risk even without explicit exfiltration behavior.