contact-finder-contactout

SUSPICIOUS. The skill's purpose matches contact enrichment, but it routes credentials and user PII through Gooseworks/Orthogonal proxy domains instead of directly to ContactOut's official API. The install/login path appears same-org and not overtly malicious, so this is more a trust and data-flow concern than confirmed malware.