apify-sdk-integration
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the official
apify-clientpackage from standard registries (NPM and PyPI) to interact with the Apify platform. - [CREDENTIALS_UNSAFE]: The documentation emphasizes secure credential handling by advising users to store API tokens in environment variables or secrets managers, and explicitly warns against hardcoding sensitive information.
- [DATA_EXFILTRATION]: The code samples demonstrate legitimate communication with official vendor infrastructure at
api.apify.comfor task execution and data retrieval. - [PROMPT_INJECTION]: The skill enables the ingestion of untrusted data from the web through scraping actors.
- Ingestion points: Data retrieved from Actor datasets and key-value stores in
SKILL.md. - Boundary markers: Not present in the integration code snippets.
- Capability inventory: Network operations and data retrieval via official client libraries in
SKILL.md. - Sanitization: No explicit data sanitization or validation logic is included in the basic integration examples.
Audit Metadata