send-email

SUSPICIOUS. The SMTP purpose matches the capability, and network endpoints are mostly first-party mail providers, but the skill’s credential handling is unsafe: it asks users to paste live email secrets into chat and use them on the command line. The default shared-looking 126 sender address is also unusual. No clear malware or exfiltration beyond intended SMTP use, but the secret collection pattern creates meaningful security risk.