cold-email-verifier

SUSPICIOUS. The core behavior matches the stated purpose, but the skill forwards lead data and an API key to a third-party verifier, supports arbitrary self-hosted verification endpoints over plain HTTP, and relies on underspecified dependencies and outdated Clearbit guidance. This is not confirmed malware, but it poses meaningful privacy, transport-security, and operational risk for an AI agent skill.