lead-enrich

SUSPICIOUS. The stated purpose matches lead enrichment, and the Composio CLI appears to be a legitimate same-org dependency, so this is not confirmed malware. The main concern is data-flow integrity: contact data and toolkit auth are funneled through Composio as an intermediary rather than direct vendor APIs, which creates moderate privacy and trust risk for a business-data enrichment skill.