imap-smtp-email

SUSPICIOUS. The skill’s core capabilities largely match its stated email purpose and data appears intended to flow directly to configured mail providers, not a third-party gateway. However, it handles raw mail credentials, can send real-world messages, documents disabling TLS verification, and relies on unseen local scripts plus unseen npm dependencies, so trust and control boundaries cannot be fully validated.