apify-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard package management commands (
npm install,npm list,npm view) and version control commands (git checkout) to facilitate the upgrade process. These commands are scoped to the intended migration workflow. - [DATA_EXPOSURE]: Instructions include verifying API connectivity using the
APIFY_TOKENenvironment variable. The provided verification script uses the officialapify-clientto perform this check against Apify's infrastructure, which is a well-known service and standard practice for this use case. - [REMOTE_CODE_EXECUTION]: The skill installs legitimate, versioned packages from the official NPM registry (
apify,crawlee,apify-client). No unverified or remote script execution (e.g., curl|bash) is present. - [INDIRECT_PROMPT_INJECTION]: While the skill involves reading and editing source files, the instructions are bounded to specific library migration patterns (e.g., renaming
handlePageFunctiontorequestHandler). There is no ingestion of untrusted external data that could influence the agent's behavior maliciously.
Audit Metadata