apify-actorization
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official Apify integration methods including the Apify SDK and CLI tools.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill correctly advises users to manage sensitive credentials like APIFY_TOKEN through environment variables or secret managers rather than hardcoding them or including them in command history.
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risks associated with automated code transformation and includes limitations advising against treating the output as a substitute for expert review. Evidence: 1. Ingestion points: The agent analyzes the user's project structure and code (SKILL.md). 2. Boundary markers: The skill includes a 'Limitations' section warning the user to not treat output as a substitute for expert review. 3. Capability inventory: The process involves writing configuration files, modifying source code, and executing CLI commands. 4. Sanitization: Relies on user review as specified in the limitations.
Audit Metadata