apify-ultimate-scraper

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of the apify CLI to perform operations such as searching for actors, calling actors, and retrieving datasets. These commands are executed via the shell and are central to the skill's functionality.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the apify-cli package from the official NPM registry (npm install -g apify-cli). This is a legitimate dependency for the Apify platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to scrape data from third-party websites and social media platforms (Instagram, Twitter, Reddit, etc.) which is then processed by AI models. This creates a surface for indirect prompt injection attacks where malicious instructions embedded in scraped content could influence the agent's behavior.
  • Ingestion points: Data is ingested from various external platforms via apify datasets get-items and Actor outputs across multiple workflow files (e.g., brand-monitoring.md, company-research.md).
  • Boundary markers: The instructions do not specify the use of delimiters or boundary markers when passing scraped content to an LLM.
  • Capability inventory: The skill possesses the ability to execute shell commands (apify CLI) and write files to the local system (saving results as CSV/JSON).
  • Sanitization: There are no instructions or scripts provided for sanitizing or escaping the content retrieved from the web before it is processed by subsequent AI steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 09:45 AM