facebook-marketing

SUSPICIOUS. The skill’s purpose and data flows are mostly coherent, and it avoids direct Facebook credentials or deceptive installs. The main concern is dependence on third-party community Apify Actors plus forwarding an Apify token to code outside the publisher’s control, which is a meaningful supply-chain and credential-trust risk but not confirmed malware.