google-contacts

SUSPICIOUS. The core capability matches the stated purpose of a Google Contacts connector, and the documented endpoints remain on AgentPMT-owned domains, which argues against outright malicious intent. However, the skill routes sensitive contact data through a third-party hosted service instead of direct Google API use, depends on prerequisite setup skills, and likely relies on local token-handling tooling, creating meaningful trust and data-governance risk. This is a coherent integration, but not a low-risk one.