instagram-scraper

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill asks the user to paste their Apify personal API token into the session and instructs the agent to "use it for the rest of the session" (and run commands that include Authorization headers), which requires the LLM to receive and potentially embed the secret verbatim in outputs — an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow sends user-supplied directUrls/search inputs to Apify’s Instagram Scraper and ingests the resulting dataset items (including comment text) that originate from Instagram/public social content, so outsider-authored free text is fetched based on attacker-controlled URLs/queries.