atl-messaging

SUSPICIOUS. The skill's messaging purpose is coherent, and the network destination aligns with the stated ColdIQ service, but it expands from writing assistance into prospect enrichment and asks users to run an unpinned `npx` MCP package while forwarding an API key to that runtime code. This is a medium supply-chain and credential-forwarding risk, not confirmed malware.