youtube-apify-transcript

SUSPICIOUS. The skill is mostly aligned with its stated purpose and uses official Apify domains, but it forwards an API token to a community-maintained third-party actor and routes transcript retrieval through external proxy-backed infrastructure marketed as bypassing bot detection. No clear malware or deceptive installer is present, but third-party actor trust and credential forwarding make the overall risk medium.