apify-actor-development
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official
apify-clipackage via NPM and the@playwright/mcptool for debugging. These are standard, well-known developer tools associated with the author's ecosystem. - [DATA_EXPOSURE]: Documentation explicitly highlights the importance of safe secret management, specifically advising against logging the
APIFY_TOKENand recommending the use of theapify/loglibrary, which automatically redacts credentials from output. - [REMOTE_CODE_EXECUTION]: The skill includes a proactive security warning against piping remote scripts to a shell, instead directing users to use package managers that provide integrity checks.
- [COMMAND_EXECUTION]: Uses legitimate project management commands via the Apify CLI (e.g.,
apify run,apify push,apify login) to facilitate standard development workflows. - [PROMPT_INJECTION]: The instructions include specific guidance for the AI agent to treat all crawled web content as untrusted input and to avoid interpreting scraped text as code or commands, which mitigates risks related to indirect prompt injection.
Audit Metadata