apify-generate-output-schema
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze Actor source code and configuration files to derive schema definitions, which creates a surface for indirect prompt injection if the analyzed files contain malicious instructions.
- Ingestion points: Local source code files (JavaScript, TypeScript, Python) and the .actor/actor.json configuration file.
- Boundary markers: Absent. The instructions do not provide delimiters or specific guidance to ignore or isolate instructions found within the code being analyzed.
- Capability inventory: The skill allows for reading repository files, creating multiple new JSON schema files, and modifying the core actor.json configuration.
- Sanitization: Absent. The skill does not specify any sanitization, validation, or human-in-the-loop review of the content extracted from source files before it is used to update the project configuration.
Audit Metadata