ops-inbox

SUSPICIOUS. The skill's purpose matches inbox management, but its footprint is unusually broad: it reads full cross-channel communications, drafts and sends replies, archives content, and schedules recurring actions. The strongest risk is trust and credential forwarding through unverifiable local binaries/MCP helpers such as ops-discord and ops-unread; under the required scoring floors, that makes this high security risk even without confirmed malware.