listex

SUSPICIOUS. The skill's functional scope mostly matches its stated purpose, and its safety guidance around destructive actions is unusually explicit. However, the installation path is a major trust failure: it uses a raw GitHub pipe-to-shell installer that the provided evidence could not publicly verify, while also claiming it is a 'release' install. Because this external CLI is the core execution path and will handle stored API keys plus high-impact actions like email sends and deletions, the skill has high supply-chain risk even without clear evidence of malicious exfiltration.