apify-buying-signal-detection

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to api.apify.com to manage Actor tasks and retrieve datasets. These operations are performed using the provided APIFY_TOKEN and are standard for Apify's API integrations.
  • [COMMAND_EXECUTION]: The skill provides Python scripts (setup_apify_tasks.py and aggregate.py) designed to be executed by the agent to provision tasks and process lead data. These scripts primarily use standard library modules (urllib, csv, json) and perform expected file I/O within the campaign directory.
  • [DATA_EXFILTRATION]: While the skill reads lead data and interacts with remote APIs, these actions are scoped to the Apify platform for data retrieval and enrichment (LinkedIn domain resolution). No sensitive local files (like SSH keys or AWS credentials) are accessed or transmitted.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes external 'Actors' hosted on the Apify platform. These are predefined scraping tools (e.g., lntb/linkedin-jobs-scraper, nexgendata/startup-funding-tracker) that run in Apify's infrastructure, not the local environment. The skill simply fetches the JSON results of these runs.
  • [SAFE]: All third-party services mentioned (Apify, LinkedIn, Indeed, Stepstone, Crunchbase) are well-known professional services relevant to the skill's purpose of lead generation and signal monitoring.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 04:14 PM
Security Audit — agent-trust-hub — apify-buying-signal-detection