apify-market-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path reads untrusted free text that an outsider supplies to Apify Actors via the skill’s --input JSON (Step 4 → run_actor.js → startActor() POSTs to https://api.apify.com/v2/acts/.../runs), and the actor’s returned dataset items are then ingested/printed (downloadResults() / displayQuickAnswer()).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's runtime script directly calls Apify API endpoints which start and poll actor runs (thus causing remote code execution) for example: https://api.apify.com/v2/acts/${apiActorId}/runs?token=${encodeURIComponent(token)}