zoho-mail

SUSPICIOUS: the skill’s core function is coherent, and the CLI source appears official, but it routes Zoho auth and mailbox data through Membrane rather than directly to Zoho. That third-party credential/data mediation plus email-sending capability makes the skill medium risk even without signs of overt malware.