ad-angle-miner
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: This is a 'composite' skill that coordinates other specialized scraping skills (
review-scraper,reddit-scraper,twitter-scraper). It provides instructions and a framework for the AI to analyze text data but does not contain its own executable scripts or network logic. - [COMMAND_EXECUTION]: The skill documents how to call other skills via command line (e.g.,
python3 skills/review-scraper/scripts/scrape_reviews.py). These are standard calls to local internal tools and do not involve shell injection or privilege escalation. - [EXTERNAL_DOWNLOADS]: While the skill mentions using Apify for scraping, these actions are performed by the 'upstream' dependency skills, not by the ad-angle-miner itself. No direct external downloads or remote script executions were detected in this skill's files.
- [DATA_EXFILTRATION]: The skill processes user-provided data (support tickets, transcripts) and public web data. All operations are local to the agent's environment, with results saved to a local file (
clients/<client-name>/ads/angle-bank-[YYYY-MM-DD].md). There are no unauthorized network send operations. - [CREDENTIALS_UNSAFE]: The skill correctly references the use of an environment variable (
APIFY_API_TOKEN) for authentication, which is a standard and safe practice for secret management.
Audit Metadata