meta-ad-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches competitor ads from Meta's Ad Library via an Apify scraper, which involves reading unstructured public ad text and creative content authored by advertisers.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script interacts with the official Apify API (https://api.apify.com/v2) to run a recognized third-party actor, which constitutes a common/reputable unofficial operational dependency.