apify-reddit-scraper

SUSPICIOUS. The skill's stated purpose matches its Reddit-scraping behavior, and its Apify install/auth paths are official. However, it forwards user inputs, scraped data, and paid account authority to a third-party community Actor owned by `harshmaur`, which creates a meaningful trust and data-flow boundary not reducible to normal official-API use. Optional connector posting is scoped and disclosed, so this is not confirmed malware, but it is a medium-risk delegation skill.