finding-saas-company-leads-twitter
Warn
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The
customMapFunctionparameter in the Inputs table accepts a string representing a JavaScript function to transform output objects. This allows for arbitrary code execution within the context of the Apify actor, which could be abused if untrusted logic is provided. - [COMMAND_EXECUTION]: The documentation provides shell commands (
curl,node) that use the$APIFY_TOKENenvironment variable and execute scripts (scripts/run_actor.js). While common for developer tools, these patterns involve shell-level execution and sensitive credential handling. - [EXTERNAL_DOWNLOADS]: The skill relies on external 'actors' hosted on Apify (
apidojo/twitter-user-scraper,apidojo/tweet-scraper). While these are vendor-owned resources from 'apidojo', they represent external code dependencies that are executed at runtime.
Audit Metadata