customer-winback

SUSPICIOUS. The business workflow is coherent, but the skill routes sensitive Gorgias, HubSpot, and Gmail access through Composio rather than official service APIs. Because a third-party CLI and managed auth layer sit between the agent and the services, this creates meaningful credential-forwarding and customer-data exposure risk despite a largely legitimate stated purpose.