scraping-youtube-comments

SUSPICIOUS: the skill is mostly aligned with its purpose and uses official Apify infrastructure, but it forwards the user's APIFY_TOKEN to run a third-party publisher's actor, has an actor-name mismatch, and shows less-safe token handling via query strings. This is not confirmed malware, but it carries moderate trust and credential-forwarding risk.