monitor-contacts

SUSPICIOUS: the skill’s stated purpose is coherent, but its footprint is broader than a simple monitor because it enforces indefinite autonomous operation, writes and retains sensitive contact intelligence, sends summaries to Discord, and relies on several unverified composed skills. No confirmed malware or deceptive exfiltration is shown, but the autonomy and transitive trust make it medium risk.