signal-scanner

SUSPICIOUS: The skill’s purpose and capabilities mostly align, and it includes a strong user-approval gate before database writes. The main risks are high-privilege Supabase access and routing enrichment through third-party Apify marketplace actors rather than first-party APIs, which creates moderate credential and data-flow exposure but not confirmed malicious behavior.