google-ad-scraper

SUSPICIOUS: The stated purpose matches ad-scraping behavior, and requested scope is mostly proportionate, but the skill's core functionality depends on a community-maintained third-party Apify actor that receives the user's APIFY_API_TOKEN and query data. That remote credential forwarding and hidden remote execution path make the install/trust model weaker than the docs imply, even though data flows appear consistent with ad research rather than overt exfiltration.