The Agent Skills Directory

[SAFE]: The skill facilitates audience analysis by interacting with the official Apify API (api.apify.com). It manages sensitive data appropriately by instructing the user to store the APIFY_TOKEN in a .env file rather than hardcoding it.
[COMMAND_EXECUTION]: The skill uses node --env-file=.env and mcpc to execute commands. These are standard operations for the skill's functionality and do not involve arbitrary or dangerous command execution.
[DATA_EXFILTRATION]: While the skill communicates with api.apify.com, this is the intended functionality of an Apify-integrated tool. There is no evidence of sensitive data (like local credentials) being sent to unauthorized third-party domains.
[DYNAMIC_EXECUTION]: The run_actor.js script processes JSON input for Apify Actors. It uses JSON.parse and JSON.stringify safely without invoking eval() or similar dangerous sinks.
[SAFE]: The CSV generation logic includes protection against CSV injection attacks (Excel Formula Injection) by prepending a single quote to cells starting with potentially executable characters (=, +, @, -).

apify-audience-analysis