apify-content-analytics
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
node --env-file=.env scripts/run_actor.jsto execute a local JavaScript file. This is the primary method for running the analytics tasks and is restricted to the bundled script provided with the skill. - [CREDENTIALS_UNSAFE]: The skill requires an
APIFY_TOKENstored in a.envfile. It includes explicit instructions and code-level checks to prevent the token from being passed as a command-line argument, displayed in chat, or leaked in error messages (using[redacted]placeholders). It correctly advises keeping the.envfile untracked and private. - [DATA_EXFILTRATION]: While the skill communicates with
api.apify.comto run actors and download results, these are established operations for the skill's stated purpose. The script uses a specific User-Agent (apify-agent-skills/apify-content-analytics-1.0.0) for transparency. - [SAFE]: The skill implements robust validation for Actor IDs and numeric arguments (timeout, poll-interval) using regular expressions to prevent injection attacks during the API request construction.
Audit Metadata