people-search

SUSPICIOUS. The core capabilities mostly match the stated people-search purpose, and installs are through expected npm channels, but the skill’s footprint is broader than a simple search helper: it auto-installs tooling, fetches untrusted web content, can unlock sensitive contact data, and includes transitive skill-update instructions. The user-confirmation exception is not covert by itself, but combined with paid contact-unlock actions and command-execution capability it makes the skill medium risk.