apify-booking-host-leads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text can enter via user/attacker-controlled lead names/destinations that are used to drive Google Maps search and Google Search queries, and then the workflow ingests the resulting website content to extract contact details (Tier 4 reads page text from third-party sites selected by those searches).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly uses the Apify platform at runtime and names the Apify MCP server (https://mcp.apify.com), which runs remote Actors (executing remote code) that the skill relies on to perform scraping/enrichment.