apify-actor-development
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains a robust 'Security' section that explicitly warns against piping remote scripts to shells and instructs on the safe handling of untrusted crawled web content.
- [SAFE]: It provides best practices for credential management, advising the use of environment variables and official CLI login methods rather than hardcoding tokens or passing them as command-line arguments.
- [SAFE]: Recommends the use of specific logging packages (
apify/logandActor.log) that are designed to automatically redact sensitive information from execution logs. - [SAFE]: Encourages secure dependency management by advising the use of lockfiles (
package-lock.json) and version pinning inrequirements.txtto prevent supply-chain attacks. - [SAFE]: Provides clear instructions for implementing input and output validation via schemas, which acts as a defense-in-depth measure against indirect prompt injection or malicious data processing.
Audit Metadata