spy-ads

SUSPICIOUS. The skill’s capabilities mostly match its ad-research purpose, and its warning about untrusted scraped content is a positive control. The main concerns are medium supply-chain and trust-chain risk: it depends on a third-party Apify actor, forwards data to external services, and delegates key behavior to other skills. No clear malicious exfiltration or deceptive behavior is present, but the external-service and transitive-skill footprint is larger than a simple research helper.