clean-validate

SUSPICIOUS. The skill is largely aligned with its stated email/phone validation purpose, but it pushes a same-org yet unpinned `npx @latest` MCP install and routes user data/API access through ColdIQ's brokered multi-provider service. This is not fundamentally incompatible with the skill's purpose, but the install trust and credential/data forwarding model are stronger than a simple reference skill and warrant medium risk.