imap-smtp-email

SUSPICIOUS. The core capabilities fit an email skill, and the documented endpoints are standard IMAP/SMTP usage, so this is not fundamentally incompatible with its stated purpose. However, it handles raw email credentials, enables outbound email actions, uses an unseen setup.sh installer, and allows arbitrary server configuration, leaving meaningful trust and misuse risk without direct evidence of malicious exfiltration.