company-people-list

SUSPICIOUS. The skill’s capabilities mostly fit its stated purpose, but it aggregates highly sensitive CRM, email, and meeting data and sends part of the workflow through third-party MCP services, especially Anysite for LinkedIn-style access. Main risk is broad business-data exposure and proxy-mediated data flow, not confirmed malware.