gtm-enrichment-smart

SUSPICIOUS: The skill’s capabilities largely match its lead-enrichment purpose, and the Gooseworks install path appears same-org and legitimate. The main concerns are raw local credential-file reading and routing all lead data through a Gooseworks/Orthogonal proxy instead of direct vendor APIs, creating meaningful privacy and intermediary-trust risk without clear malicious intent.