google-contacts

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and examples for using the Apideck CRM unified API to interact with Google Contacts. All analyzed components align with legitimate integration practices.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill references standard API environment variables (APIDECK_API_KEY, APIDECK_APP_ID) as placeholders for authentication. This is consistent with secure development practices and does not include hardcoded credentials.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources including documentation (developers.apideck.com), API specifications (specs.apideck.com), and official Google developer documentation (developers.google.com). These are all from well-known or trusted vendor domains and do not constitute a security risk.
  • [COMMAND_EXECUTION]: Examples include standard curl commands for verifying connector coverage and using the Proxy API. These commands target official Apideck endpoints and are used for routine development tasks.
  • [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process external contact and lead data from Google Contacts, it focuses on the structural implementation of the API connector rather than data processing instructions, posing a negligible risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:54 AM