apify-ultimate-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's fundamental operation involves scraping untrusted data from social media (Instagram, TikTok, X, Reddit) and arbitrary websites (via Website Content Crawler). This data is then returned to the AI for tasks such as sentiment analysis, summarization, and lead qualification.
- Ingestion points: Data enters the agent's context through commands like
apify datasets get-itemsand the outputs of various Actors (e.g.,apify/instagram-scraper,apify/website-content-crawler), as seen inSKILL.mdand the workflow guides inreferences/workflows/. - Boundary markers: There are no instructions to use specific delimiters (like XML tags) or to provide the model with 'ignore' instructions when processing the scraped content to prevent it from following embedded malicious commands.
- Capability inventory: The skill utilizes the Apify CLI for network and compute operations (
apify actors call,apify actors start) and mentions theWritetool for file system access. - Sanitization: The instructions do not describe any sanitization, filtering, or validation of the retrieved text before it is processed by the LLM.
- [COMMAND_EXECUTION]: The skill makes extensive use of the
apify-clito interact with the Apify platform. It provides specific command patterns for starting actors, polling runs, and retrieving datasets, which are executed locally within the agent's environment. - [EXTERNAL_DOWNLOADS]: The skill explicitly instructs the agent to install the
apify-clitool globally usingnpm install -g apify-cliif it is not already present. This is a dependency on a public software registry and a third-party vendor (Apify).
Audit Metadata