apify-content-analytics
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Node.js script (
reference/scripts/run_actor.js) and a global CLI tool (mcpc). These commands are used to interact with the Apify API and process analytics data as intended by the skill's primary purpose. Evidence:SKILL.mdsteps 2 and 4. - [EXTERNAL_DOWNLOADS]: The
run_actor.jsscript fetches data fromapi.apify.comand themcpctool fetches schemas frommcp.apify.com. These are legitimate endpoints for the Apify platform, which is a well-known service for web scraping and automation. Evidence:run_actor.jslines 105, 142, and 192. - [CREDENTIALS_UNSAFE]: The skill requires an
APIFY_TOKENstored in a.envfile. This is a standard and safe practice for local development to prevent hardcoding secrets. The instructions do not ask the user to share the token in the chat. Evidence:SKILL.mdPrerequisites and Step 2.
Audit Metadata