post-scorer

SUSPICIOUS. The skill's purpose is coherent, but it outsources data collection to a community-maintained, unpinned Apify actor and likely requires an Apify token to run that third-party code. No clear malware or hidden exfiltration appears, yet the external actor trust and credential-forwarding footprint make it higher risk than a normal analysis-only skill.