contactout

SUSPICIOUS: the skill's functions fit ContactOut enrichment, but its real data flow routes sensitive people-search inputs and auth through Orthogonal's `api.orth.sh` gateway instead of ContactOut's official API. This third-party broker pattern is a meaningful trust and privacy risk, with medium overall security risk but not enough evidence for confirmed malware.