email-validator

SUSPICIOUS: the skill's stated purpose is simple email validation, but it delegates to a much broader BrowserAct browser-automation stack, auto-installs another skill/CLI without confirmation, and may forward credentials or browser state into that runtime. The install sources appear plausibly official rather than overtly malicious, so this is not confirmed malware, but the scope and transitive trust are disproportionate to the advertised purpose.