apify-reddit-scraper
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the Apify CLI to invoke remote Actors and retrieve datasets. This involves the execution of shell commands such as "apify actors call" and "apify datasets get-items" to perform its core functions.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Reddit, including post titles, bodies, and comments. This presents an attack surface where malicious instructions could be embedded in the scraped content.
- Ingestion points: External data enters the context via "apify datasets get-items" as described in Step 4.
- Boundary markers: The skill explicitly warns the agent to treat scraped text as untrusted data and not to follow instructions found within it.
- Capability inventory: The agent has capabilities for command execution (Apify CLI), file writing (local JSON export), and network operations (Apify platform interaction).
- Sanitization: The instructions specify quoting scraped text as plain text and ignoring links or images to prevent accidental execution or navigation.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the "apify-cli" via "npm". This is an official tool from Apify, a well-known service, and is used as intended for service interaction.
Audit Metadata