kelly-jobhunt

SUSPICIOUS: the skill is broadly coherent with its stated job-outreach purpose, and the main data flows to Busabase and SMTP are proportionate. Risk is elevated because it handles mailbox credentials, performs public-email sending, uses web research/automation over untrusted content, and depends on additional skills, but there is no clear sign of credential harvesting, hidden exfiltration, or an unverified binary installer in the provided text.