extracting-google-paa-questions-for-seo

SUSPICIOUS. The skill's purpose and capabilities mostly align, but it forwards the user's APIFY_TOKEN and search data to a third-party Apify actor publisher rather than a first-party scraper, and the documented REST path exposes the token in a URL query string. This is not confirmed malware, but it carries medium risk from third-party trust and credential-handling choices.