apify-instagram-niche-mapper
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for secret management, explicitly instructing the user to use environment variables or local authentication rather than hardcoding tokens in commands or URLs.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from Instagram, such as captions and transcripts. This surface is well-mitigated by explicit instructions in both
SKILL.mdandreferences/gotchas.mdthat command the agent to treat scraped content strictly as data for analysis and never as instructions to follow. - [COMMAND_EXECUTION]: The skill uses the Apify CLI and official Apify actors (e.g.,
apify/instagram-reel-scraper) to perform data extraction. This is the intended primary purpose of the skill and uses well-known, vendor-provided tools. - [SAFE]: The Python scripts included in the
scripts/directory perform standard data manipulation usingpandasandnumpy. No dangerous functions likeeval(),exec(), or suspicious network operations were detected in the source code.
Audit Metadata