influencer-sourcing

SUSPICIOUS: The skill’s purpose and requested credentials are mostly coherent, and the PyPI install is standard, but the core workflow depends on Apify-hosted actors and forwards an APIFY token to third-party executed code, including a non-official TikTok actor publisher. With the local scripts absent, endpoint and credential handling cannot be fully verified, so the overall risk is medium rather than benign.