apify-influencer-discovery
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local Node.js script (
run_actor.js) and the@apify/mcpcCLI tool to interact with Apify actors. These commands are restricted to the intended purpose of scraping and processing social media data. - [EXTERNAL_DOWNLOADS]: The skill communicates with official Apify API endpoints (
api.apify.com) to run actors and retrieve datasets. It also references the installation of the official Apify MCP tool from a public registry. - [CREDENTIALS_UNSAFE]: The skill requires an
APIFY_TOKENfor authentication. It correctly follows security best practices by instructing the user to store the token in a.envfile and loading it using the native Node.js--env-filefeature, avoiding hardcoded secrets or unsafe exposure. - [DATA_EXFILTRATION]: Data retrieved from social media platforms is either displayed to the user or saved to local CSV/JSON files as requested. The script includes logic to prevent CSV injection attacks by escaping cells that start with potentially dangerous characters.
Audit Metadata