apify-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install official packages from the npm registry, including the
apify-cliand SDK librariesapifyandcrawlee, which are standard for the Apify development ecosystem.\n- [COMMAND_EXECUTION]: Instructs the use of shell commands through the Apify CLI and Node.js (apify create,apify run,npx tsx) to initialize projects and execute local development loops.\n- [INDIRECT_PROMPT_INJECTION]: The skill builds crawlers that process untrusted data from external websites. Ingestion Point:src/main.tsusingCheerioCrawler. Boundary Markers: Absent (inherent to the scraping process). Capability Inventory: Local storage writes viaActor.pushDataand command-line execution for testing. Sanitization: Extracts raw text content using the.text()method, providing basic filtering of HTML structures.\n- [DATA_EXFILTRATION]: Documents the location of the Apify platform token in~/.apify/to explain CLI authentication. The instructions prioritize security by warning users against committing secrets to version control and recommending the use of environment variables for non-interactive sessions.
Audit Metadata