apify-reddit-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses an Apify actor to scrape public Reddit posts, comments, and subreddits, which are authored by outsiders and ingested as free text into the agent context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a paid Apify scraper actor (harshmaur/reddit-scraper) which charges per run start and per stored item, constituting a direct financial operation (purchases/service charges). However, Apify execution requires an authenticated user account or token (apify login, APIFY_TOKEN, or Apify Console integration), establishing independent service authentication/access control over the platform and API route. Therefore, this qualifies as a direct financial operation with independent access control (Medium severity).