apify-audience-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path run_actor.js accepts only user-provided JSON input for starting an Apify Actor, then it downloads structured dataset items/results from Apify APIs (/v2/datasets/${datasetId}/items) and prints/saves those values, so outsider-authored free text can be ingested from dataset items coming from the actor’s monitored external sources (e.g., comments or profile text) without selecting a specific item first.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill issues runtime calls to Apify endpoints (e.g., https://api.apify.com/v2/acts/${apiActorId}/runs?token=${encodeURIComponent(token)}) and to mcp.apify.com to fetch Actor schemas and to start actors, which executes remote actor code and provides schema data that controls inputs/prompts.