luma-event-attendees

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches and parses web pages and search results from Luma and Apify (scripts/apify_client.py), ingesting outsider-authored free text such as event descriptions, host/guest bios, and user profiles into the agent's context when performing searches or scraping event pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill executes a runtime dependency on an Apify actor hosted at apify.com by making API calls to fetch operational actor execution results and code/configuration behavior via user-supplied identifiers, representing an unverified third-party platform interaction.