community-signals

SUSPICIOUS: The skill’s overall behavior is coherent with forum lead discovery, but Reddit collection relies on third-party Apify scraping rather than official APIs, and the skill likely forwards an Apify token plus query data to external actor infrastructure. This is not clearly malicious, yet the third-party credential/data flow and untrusted-content processing with write/exec-capable tools create medium risk.