inbound-lead-enrichment

SUSPICIOUS. The core capability is coherent with inbound lead enrichment, and direct CRM/vendor API use is proportionate. Risk comes from optional third-party enrichment tools—especially Apify marketplace scrapers and the unverified company-contact-finder—which may receive lead data or credentials outside official vendor paths; the 'silent' config loading also reduces transparency but is not by itself malicious.