google-contacts

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard functionality for managing Google Contacts through remote tool calls. All operations are consistent with the stated purpose of contact management.
  • [EXTERNAL_DOWNLOADS]: The documentation includes standard installation commands using npx to fetch and install related setup skills from the vendor's official GitHub repository (AgentPMT/agent-skills).
  • [COMMAND_EXECUTION]: Provides documented CLI commands for user-initiated installation of configuration dependencies (npx skills add). These are typical for the platform's ecosystem.
  • [PROMPT_INJECTION]: The skill processes external contact data (such as the notes and names fields) which could technically serve as an indirect prompt injection surface. However, this is an inherent risk of any data-processing tool and the skill does not exhibit any patterns that would escalate this concern beyond standard usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 03:50 AM