apify-ecommerce

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the apify CLI to execute scraping tasks. It includes a specific recommendation to use file-based input (-i @input.json) to prevent shell quoting issues and potential command corruption when handling user-provided data.\n- [REMOTE_CODE_EXECUTION]: The skill runs remote scraping logic on the Apify platform via the apify actors call command. This is the intended functionality of the tool and is managed through an official CLI.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites, which could contain malicious prompts. The impact is limited as the agent uses this data for analysis rather than further command execution.\n- [EXTERNAL_DOWNLOADS]: The skill relies on standard tools like apify-cli and jq, which are installed from official package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:20 PM
Security Audit — agent-trust-hub — apify-ecommerce