apify-market-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In reference/scripts/run_actor.js, the workflow ingests outsider-authored free text via the --input JSON (user-provided search strings/queries) and then posts it to https://api.apify.com/v2/acts/.../runs, after which it downloads and displays the actor results items (also free text) from https://api.apify.com/v2/datasets/${datasetId}/items either to an output file or to chat.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs runtime calls that start and control remote Apify actors (which execute remote code) via the Apify API (e.g., https://api.apify.com/v2/acts/${apiActorId}/runs?token=${encodeURIComponent(token)}) and also fetches actor schemas at runtime from mcp.apify.com which can control prompts/inputs.