facebook-marketing

SUSPICIOUS. The skill’s purpose and data needs are broadly coherent, and it uses official Apify authentication rather than an obvious exfiltration service. The main risk is supply-chain and credential-forwarding trust: the skill depends on community Apify actors, and the user’s APIFY_TOKEN is used to invoke third-party scraper code that was not fully verified as official same-org tooling.