apify
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
npx @useclawlink/clito authenticate and interact with Apify resources, including running actors and retrieving datasets. - [EXTERNAL_DOWNLOADS]: The skill references the
@useclawlink/clipackage, which is fetched from the NPM registry. This is a standard dependency for the integration's functionality. - [REMOTE_CODE_EXECUTION]: The use of
npxto run the@useclawlink/clipackage involves downloading and executing code at runtime. As this is the official tool from the skill vendor, it is considered a legitimate operational requirement. - [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to ingest external data from web scrapers and datasets, creating a potential surface for indirect prompt injection.
- Ingestion points: Results from
apify_run_actor_sync, logs fromapify_get_log, and items fromapify_get_dataset_items. - Boundary markers: The instructions do not specify explicit delimiters or "ignore" warnings for the agent when processing retrieved content.
- Capability inventory: The skill can execute shell commands via
npxand perform network operations through the ClawLink service. - Sanitization: No evidence of data sanitization or schema validation is present in the skill's instructions.
Audit Metadata