email-skill

SUSPICIOUS. The skill’s network destinations and install footprint are mostly coherent and benign, but it enables autonomous outbound email and attachment transfer using raw mail credentials, and its documented implementation does not fully match its broader claims to read/search/organize mail. Main risk is real-world messaging and possible exfiltration, not malware or a supply-chain attack.