cold-email-4-sequence

SUSPICIOUS. The skill’s core purpose is coherent, and ColdIQ domains appear same-org and purpose-aligned, but it mixes a benign writing framework with unpinned `npx` execution of an external MCP package and direct API-key forwarding to that package. This looks more like supply-chain and credential-forwarding risk than confirmed malicious behavior.