apify-ai-search-visibility-tracker

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). All listed links are legitimate documentation, API, or example sites except https://apifyclone.com/x, which appears to be a typosquat/clone of the official apify domain and is thus suspicious for distributing malicious assets.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Workflow D’s runtime (reference/scripts/run_snapshot.py) calls apify/google-search-scraper with user-provided queries and then ingests the returned free-text AI answer fields (answer_text via _block_text from aiOverview/chatGptSearch/perplexity/copilot/gemini), which can include outsider-authored content from the web/search results without selecting a specific item first.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill instructs creating/editing local config files, changing file permissions, and installing OS scheduled jobs (cron/launchd) which modify the host's persistent state and install background tasks — though it does not request sudo or creating new user accounts.