google-ad-scraper

SUSPICIOUS: the skill’s purpose matches ad research, but its core behavior depends on a community-maintained Apify actor that runs with the user’s APIFY_API_TOKEN. This is a credential-forwarding and third-party code trust risk rather than confirmed malware; the main issue is disproportionate execution trust, not the advertised scraping goal itself.