apify-audience-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute a local Node.js script (
run_actor.js) and the@apify/mcpcCLI tool. These tools are used to orchestrate data extraction tasks on the Apify platform. - [EXTERNAL_DOWNLOADS]: The
run_actor.jsscript fetches data and actor configurations fromapi.apify.comandmcp.apify.com. These are official endpoints for Apify, a well-known web scraping and automation platform. - [DATA_EXFILTRATION]: The skill transmits the user's
APIFY_TOKENto the official Apify API to authenticate requests. This is a standard and necessary operation for the skill's functionality. The instructions correctly advise users to store this sensitive token in a.envfile. - [PROMPT_INJECTION]: The skill processes data from social media platforms which acts as a surface for indirect prompt injection.
- Ingestion points: External social data is ingested via the Apify API in
run_actor.jsand displayed to the agent or saved to files. - Boundary markers: No explicit delimiters or boundary markers are used in the prompt instructions to isolate potentially malicious external data.
- Capability inventory: The
run_actor.jsscript has the capability to write extraction results directly to the local filesystem usingwriteFileSync. - Sanitization: The script implements
csvCellto mitigate CSV formula injection and truncates long strings to reduce the impact of large or malicious inputs.
Audit Metadata