email-design

SUSPICIOUS: the core design guidance is benign and the inference.sh tooling appears officially documented, but the skill’s footprint is broader than its stated purpose because it installs other skills, relies on an external CLI/login flow, and routes content to remote generation services. This looks more like medium supply-chain and transitive-trust risk than malware.