pp-resend

SUSPICIOUS. The skill's capabilities mostly match its stated Resend-management purpose, but its core functionality is delegated to a non-official external CLI installed from a third-party package/repo and likely entrusted with Resend API credentials. That supply-chain and credential-forwarding risk is disproportionate compared with using official Resend SDKs or APIs directly. Additional webhook delivery and optional feedback posting create extra outbound paths, though they are disclosed.