turbosmtp

SUSPICIOUS: the install path is relatively normal for a developer CLI, but the skill's stated purpose is TurboSMTP integration while its actual control plane, authentication, and data flow are routed through Membrane. That intermediary architecture is a material trust expansion and only partially aligned with the claimed single-service integration, producing medium security risk but not clear malware evidence.