google-contacts
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The connector facilitates contact management through the Google People API. It correctly uses OAuth 2.0 via Zapier-managed connections or direct access tokens, following least-privilege principles.- [EXTERNAL_DOWNLOADS]: Fetches standard, versioned dependencies from the official NPM registry during installation. These libraries (@zapier/connectors-sdk, zod, etc.) are maintained by trusted organizations.- [COMMAND_EXECUTION]: The skill's entry point (cli.js) executes its own internal logic via spawnSync. This is used to bridge different Node.js environments and is restricted to running code bundled within the skill directory.
Audit Metadata