email-campaign

SUSPICIOUS: The skill's email-campaign purpose matches its lead-generation actions, but it reads a local credential file and sends both credentials and prospecting data through Gooseworks proxy endpoints instead of official provider APIs. The install path looks same-org and documented, so this is not confirmed malware, but the intermediary data flow and raw credential handling make the skill medium-high risk.