lead-lists

SUSPICIOUS: the skill’s capabilities generally match its stated lead-generation purpose, but it routes research and draft creation through a third-party MCP and includes transitive plugin/skill installation instructions. The biggest concerns are remote data handling, connected mailbox side effects, and added trust chain complexity rather than confirmed malicious behavior.