apify-ashby-jobs-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides multiple examples for executing shell commands using the Apify CLI (
apify actors call,apify actors info,apify datasets get-items) to interact with the Apify cloud platform. - [EXTERNAL_DOWNLOADS]: The skill instructs users to connect to a Model Context Protocol (MCP) server at
https://mcp.apify.com/?tools=actors,docs,johnvc/ashby-job-board-scraperto integrate the scraping tool with AI agents like Claude. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external Ashby job boards (specifically
descriptionMarkdown,descriptionHtml, anddescriptionText) which is intended to be passed into LLM pipelines. - Ingestion points: Data fields retrieved from the
johnvc/ashby-job-board-scraperActor containing external job descriptions and employer-published metadata. - Boundary markers: None identified in the skill instructions to prevent an agent from inadvertently following instructions embedded within a scraped job posting.
- Capability inventory: The skill uses the Apify CLI to perform network operations and retrieve data from the Apify API.
- Sanitization: No sanitization or filtering of the external markdown/HTML content is implemented before it is processed by the agent.
Audit Metadata