mailgun

SUSPICIOUS: The skill broadly matches its Mailgun-management purpose, and the CLI provenance appears vendor-consistent via npm. However, it requires trusting a third-party CLI/platform to broker Mailgun authentication and proxy all requests, which is a meaningful credential and data-flow expansion beyond direct Mailgun API use. This is not confirmed malware, but it is a medium-risk integration pattern.