luma-event-attendees

The skill's purpose and data collection are broadly aligned with event attendee prospecting, and its basic install path is conventional. Risk comes from the paid search mode: it depends on a third-party Apify actor outside the publisher's control, so the user's token and queries are routed through external hosted code; this is more suspicious than the direct scrape mode but not enough to indicate confirmed malware.