resend-integration-skills

The script appears to be a legitimate setup helper and contains no direct evidence of malware, exfiltration, backdoors, or system damage. It does execute code from a mutable remote repository through `npm install` and `npm run build`, and it may execute arbitrary contents of a pre-existing target directory. It also prints the entered Resend API key in plaintext, creating an avoidable credential exposure risk. Review and pin the repository commit and dependencies, validate or require an empty target directory, avoid printing secrets, and JSON-escape user-provided values.