apify-creator-emails
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides explicit security guidance for managing credentials, instructing users to use environment variables or headers rather than hardcoding tokens into scripts or URLs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data scraped from external social media profiles and third-party websites during the email discovery process.
- Ingestion points: Data is ingested via the
flash_scraper/creator-leads-scraperActor, which retrieves bio text and crawls external creator websites. - Boundary markers: None explicitly defined in the prompt instructions, although the output is constrained to a structured 51-column dataset schema.
- Capability inventory: Uses
apify actors callto execute scrapers andapify datasets get-itemsto retrieve results. - Sanitization: No specific sanitization or filtering of the scraped text (bio/website content) is mentioned before it is returned to the user or processed by the agent.
Audit Metadata