tapac

SUSPICIOUS. The skill’s contact-finding purpose broadly matches its capabilities, but the trust model is weak: it installs runnable code from a GitHub repo via `uvx`, then sends an API key and user search data through that code to a separate remote service. The data flows are consistent with the product claim, yet the install provenance is not strong enough to treat as benign without independent verification of repo ownership, official docs, and release history.

No clear embedded malware is visible in this client fragment. The dominant security concern is that it dynamically fetches and executes an MCP server from a remote GitHub URL at runtime using `uvx --from git+https://...`, turning the supply chain and spawned server into a major untrusted component. Additionally, it hardcodes an API key-like value into the spawned process environment and prints tool outputs that may contain sensitive contact/personal data without redaction. Treat the executed server code and returned results as untrusted; prefer pinned/verifiable artifacts and sanitize/limit logged output.