apify-ultimate-scraper
Warn
Audited by Snyk on Mar 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly runs Apify actors to scrape public, user-generated content from sites like Instagram, Facebook, TikTok, Google Maps, Booking.com, and then downloads and reads dataset items via the Apify API (see SKILL.md workflow and reference/scripts/run_actor.js fetching https://api.apify.com/v2/datasets/... and displaying the top results), so untrusted third‑party content is ingested and can drive follow-up actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata