Question 1

Are the outside sites checked?

Accepted Answer

Reviewers check every web request a pack makes, and the listing has to say which services it talks to.

Question 2

Do integrations need an API key?

Accepted Answer

Some do. The listing says so, and you add the key on the pack's page.