cold-email-verifier

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose, but trust and data-flow details are weaker than ideal: it sends lead data and an API key to a third-party verifier, references a possibly stale Clearbit API, and suggests plain-HTTP calls to a self-hosted verifier. This is not fundamentally incompatible with the purpose, so it is not malicious, but the external dependency and credential-forwarding footprint make it higher risk than a narrowly scoped local-only email utility.