apify-ecommerce
Warn
Audited by Snyk on May 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill launches an Apify actor to scrape public e-commerce sites and Google Shopping (see the Workflows for Products/Reviews/Sellers in SKILL.md) and run_actor.js downloads and displays the dataset items (including user reviews and product page text) for AI summarization, meaning the agent ingests untrusted, user-generated third‑party content that could carry embedded instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata