twitter-scraper

SUSPICIOUS. The skill's purpose and requested credential are broadly coherent, and the `requests` install is ordinary, but the core behavior depends on a community-maintained Apify actor that receives the user's Apify token and query data. This is not confirmed malware, but it creates a notable third-party trust and credential-forwarding risk that is higher than a direct first-party API integration.