competitor-research

SUSPICIOUS. The skill’s overall purpose and capabilities mostly align, but it sends data and an Apify token to a third-party marketplace Actor outside the publisher’s control and exposes a no-auth client feedback page by tenant slug. This looks like a legitimate business workflow with medium security risk rather than confirmed malware.