linkedin-profile-scraper

SUSPICIOUS: the skill’s stated purpose matches its behavior, but its core functionality relies on a community-maintained third-party Apify actor that receives the APIFY_API_KEY and processes lead queries/data without version pinning or visible source review in the provided skill. This is not confirmed malware, but it is a meaningful credential-forwarding and third-party execution risk.