career-ops-plugin-apify
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates exclusively with
api.apify.comto trigger actors and retrieve results. This behavior is documented in the manifest and targets a well-known, trusted service.\n- [DATA_EXFILTRATION]: API tokens are retrieved from the execution environment and passed securely via HTTP headers. There is no evidence of token exposure or transmission to unauthorized domains.\n- [PROMPT_INJECTION]: The plugin ingests data from external websites. It includes a sanitization step that removes potentially malicious HTML elements like<script>and<style>tags before the content is presented to the agent.\n- [COMMAND_EXECUTION]: File system access is restricted to creating and writing to a local cache directory (jds/) for storing job descriptions. No shell commands or arbitrary script executions are performed.
Audit Metadata