linkedin-message-writer

SUSPICIOUS. The skill's purpose and core behavior are mostly aligned: it researches LinkedIn leads, writes outreach copy, and exports CSVs. The main risk is trust delegation to third-party HarvestAPI actors on Apify using the user's APIFY_API_TOKEN; this is broader than a simple first-party API integration, though not clear malware or credential theft. Data flows stay on official Apify endpoints, requested access is limited to one relevant token, and there is no remote-code install path. Overall this is a coherent but moderately risky outreach automation skill due to third-party actor reliance and scaled personal-data processing.