apify-yandex-search-api
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the apify CLI, including apify actors call, apify actors info, and apify datasets get-items. These commands are used to interact with the Apify platform to run scraping Actors and retrieve resulting data.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external search data from Yandex search results, which are inherently untrusted. This introduces a potential surface for indirect prompt injection where malicious instructions embedded in web content could attempt to manipulate the agent's behavior.\n
- Ingestion points: Untrusted data enters the agent context through the apify datasets get-items command which returns search titles, snippets, and other page content.\n
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious embedded content within the search results.\n
- Capability inventory: The agent is empowered to execute shell commands and trigger network operations via the Apify platform.\n
- Sanitization: There is no explicit sanitization or filtering of the search result content before it is processed by the agent.
Audit Metadata