competitor-ad-scrape

SUSPICIOUS: the skill's purpose is coherent, but it reads raw local credentials, forwards work to a non-official third-party Apify actor, and processes downloaded untrusted media with local binaries. Data mostly flows to official APIs, so this is not confirmed malware, but the trust and credential-handling footprint is riskier than a narrowly scoped first-party integration.