Apify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow can fetch and ingest outsider-authored free text from Apify actor datasets (e.g., scraped social posts/comments/reviews) via dataset.listItems() and then returns fields like text/caption/description into the agent’s LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill uses the Apify platform at runtime (ApifyClient calls to the Apify API, e.g. https://api.apify.com/v2) to execute remote actors (apify.callActor / waitForRun), which runs remote code and is a required dependency (APIFY_TOKEN), so this external URL enables remote code execution during skill runtime.