apify-trend-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (
run_actor.js) to interact with the Apify API. This is the primary function of the skill and uses standard argument parsing for configuration. - [DATA_EXPOSURE]: The skill requires an
APIFY_TOKENstored in a.envfile. It follows best practices by instructing the user to manage secrets in this file rather than hardcoding them or passing them as cleartext arguments. - [EXTERNAL_DOWNLOADS]: The skill interacts with
api.apify.comandmcp.apify.com. These are the official endpoints for the Apify platform, which is a well-known service for web scraping and data extraction. These connections are necessary for the skill's documented functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from external platforms (Google Trends, Instagram, TikTok, etc.). While this is an ingestion of untrusted data, the skill includes sanitization logic (CSV cell escaping) in
run_actor.jsand limits the output displayed in the chat to truncate long strings, reducing the surface for injection attacks.
Audit Metadata