apify-ecommerce
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
apifyCLI to execute scraping tasks. It includes a specific recommendation to use file-based input (-i @input.json) to prevent shell quoting issues and potential command corruption when handling user-provided data.\n- [REMOTE_CODE_EXECUTION]: The skill runs remote scraping logic on the Apify platform via theapify actors callcommand. This is the intended functionality of the tool and is managed through an official CLI.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites, which could contain malicious prompts. The impact is limited as the agent uses this data for analysis rather than further command execution.\n- [EXTERNAL_DOWNLOADS]: The skill relies on standard tools likeapify-cliandjq, which are installed from official package registries.
Audit Metadata