Mailtap

This skill appears to do what it advertises: generate temporary emails and retrieve messages via public endpoints (api.mailtap.org) and public attachments (s3.mailtap.org). Before installing or letting agents use it autonomously, consider the following: - Attachments are publicly downloadable and may contain malware; ensure agents enforce MIME-type whitelists, file-size limits, and run downloaded files through a virus scanner or sandbox before processing or opening. - The included Python helper shows safety checks (whitelist and max size) but the file is truncated in the bundle — review the full helper code or reimplement download logic to confirm it does not execute unvalidated content. - Public temporary-email services are useful but can be abused for fraud or account creation; ensure your usage complies with service terms and your organization's policies. - Verify the API hostnames (api.mailtap.org, s3.mailtap.org) are the intended official endpoints and that you are comfortable allowing network access to them. If you need stronger assurance (e.g., for automated, high-volume workflows), request full source code for the helper or run downloads in an isolated environment; otherwise the skill is internally consistent with its stated purpose.