recoup-platform-api-access

SUSPICIOUS. The skill is largely coherent with its stated purpose and uses same-org official Recoup endpoints, so it does not look malicious. However, it grants broad action scope outside Recoup, supports real-world side effects like email sending and document edits, and contains auth guidance inconsistent with official docs, creating meaningful security and misuse risk.