first-touch

SUSPICIOUS: The core writing purpose is legitimate, but the skill expands into third-party prospect enrichment and verification, encourages installing a mutable external MCP package, and forwards API-backed research through ColdIQ infrastructure. This is not confirmed malware, but its footprint is broader and riskier than a simple email-writing skill.