cold-email-lemlist

SUSPICIOUS: the skill is broadly aligned with its cold-email purpose and sends data to official endpoints, but it combines unpinned third-party CLI execution, direct API-key pasting, and automated bulk outbound actions. This looks more like a risky sales automation workflow than malware, with medium security risk driven by supply-chain and credential-handling concerns.