discover-contacts

SUSPICIOUS: The skill’s purpose broadly matches its capabilities, but it externalizes contact-derived queries to third-party search/research services, stores enriched profiles in shared memory, and depends on undocumented internal slash skills whose provenance and data handling are unverifiable from this file. No strong malware indicators or hostile install chain are present, but the privacy and untrusted-content/data-flow risks are material.