I think the whole approval process is just a ToS legal scheme of "we did our part, so we can go after you and blame you if something happened." I don't know if will ever scan your URL for any intelligent malicious misuse but it may. If someone can explain exactly how "skill" works with Alexa... sounds like some kind of Pipe / IFTT kind of service.