agentmail

SUSPICIOUS. The skill is internally coherent and uses official same-org infrastructure, so it does not look malicious. However, it grants an agent autonomous email capabilities and forwards a live API key to an external MCP service, making it high-impact and medium overall security risk despite legitimate purpose.