review-site-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime path calls Apify actors to fetch third-party product reviews (G2/Capterra/Trustpilot) and then ingests the scraped review body text (review.get("text") / review.get("body")) into the script’s JSON output, which would be available for the agent/LLM context—i.e., outsider-authored free text from public review pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The script makes runtime API calls to Apify (BASE_URL https://api.apify.com/v2, or the GooseWorks proxy https://api.gooseworks.ai when GOOSEWORKS_API_KEY is set) to start third-party Apify actors (e.g., focused_vanguard~g2-reviews-scraper), which executes remote code required for the skill to operate.