tracking-competitor-social-media-growth

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes requests to api.apify.com to trigger social media scrapers. This is the intended core functionality of the skill and uses the vendor's official API infrastructure.
  • [COMMAND_EXECUTION]: Provides template commands for running a local script scripts/run_actor.js. These are intended for the user to execute manually and do not contain malicious patterns.
  • [DATA_EXFILTRATION]: While the skill reads social media data, it only fetches public profile metrics (follower counts, engagement) from targeted platforms and returns them to the user's chat context.
  • [CREDENTIALS_UNSAFE]: References an APIFY_TOKEN environment variable. This is a standard and safe way to handle authentication tokens, and the skill correctly instructs users to manage it via environment variables rather than hardcoding.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 06:37 PM
Security Audit — agent-trust-hub — tracking-competitor-social-media-growth