kol-discovery

SUSPICIOUS: the skill's purpose is coherent, but its core data collection relies on a third-party community Apify actor that receives token-backed execution authority. This is a moderate trust and credential-forwarding risk rather than confirmed malware.