web-crawler

SUSPICIOUS. The skill’s scraping capabilities mostly match its stated purpose, and the scanner’s command-injection hits are documentation artifacts. Risk comes from the unverifiable internal proxy trust model and routing of user requests/content through multiple third-party services, especially community Apify actors, rather than direct official auth flows alone.