contact-messenger

SUSPICIOUS: the skill's purpose and core capabilities mostly align, but it enables autonomous outbound messaging and depends on an external `imsg` CLI with only partially verified provenance. Data flows appear consistent with official messaging providers, so this is not confirmed malicious, but the real-world action risk and third-party CLI trust gap make it medium risk.