apify-ultimate-scraper

SUSPICIOUS. The skill's scraping capabilities align with its stated purpose and the mcpc install path is official Apify npm provenance, so this is not confirmed malware. However, the skill materially expands trust to numerous third-party Apify Actors, forwards APIFY_TOKEN through external tooling, and lacks the referenced local script for verification, making the overall footprint higher-risk than a narrowly scoped API integration.