lessie-email

SUSPICIOUS. The skill's capabilities fit its stated email purpose and its main endpoints are coherent with Lessie, but it introduces medium trust risk through runtime npx execution, remote MCP routing, and transitive skill installation. No clear credential theft or incompatible behavior is shown, yet the installation/update chain and silent version-check behavior warrant caution.