finding-brand-collaborations-on-tiktok

SUSPICIOUS. The skill’s purpose is coherent and the primary API endpoint is official Apify infrastructure, but it forwards an APIFY_TOKEN to remote third-party Apify actors and references an unverifiable local helper script. This is not confirmed malware, yet the trust model is broader than a simple analytics skill and should be treated as medium risk.