resend

SUSPICIOUS. The skill's purpose aligns with Resend operations, and the install path uses a normal npm package with same-org evidence, so this is not confirmed malware. However, the integration is mediated by ClawLink rather than direct Resend APIs, meaning credentials and user data/actions flow through a third party, and the skill enables outbound email and other write actions via an unpinned external CLI.