google-contacts
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard functionality for managing Google Contacts through remote tool calls. All operations are consistent with the stated purpose of contact management.
- [EXTERNAL_DOWNLOADS]: The documentation includes standard installation commands using
npxto fetch and install related setup skills from the vendor's official GitHub repository (AgentPMT/agent-skills). - [COMMAND_EXECUTION]: Provides documented CLI commands for user-initiated installation of configuration dependencies (
npx skills add). These are typical for the platform's ecosystem. - [PROMPT_INJECTION]: The skill processes external contact data (such as the
notesandnamesfields) which could technically serve as an indirect prompt injection surface. However, this is an inherent risk of any data-processing tool and the skill does not exhibit any patterns that would escalate this concern beyond standard usage.
Audit Metadata