apify-osint-threat-intel
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides command-line templates for the Apify CLI that interpolate user-provided strings (such as product names, versions, or domain names) into shell commands. This creates a potential surface for command injection if the agent does not properly escape these inputs before shell execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and analyze data from untrusted external sources, including search engines, social media platforms (Reddit, Twitter/X), and paste sites.
- Ingestion points: External data is retrieved via Apify actors and processed by the agent in SKILL.md (e.g., Step 2a through 2d).
- Boundary markers: The instructions do not define specific delimiters or "ignore instructions" markers for the external content retrieved from the web.
- Capability inventory: The skill uses the
apifyCLI to perform network operations and retrieve data from external sources. - Sanitization: There are no explicit sanitization steps defined for the content retrieved from external sources before the agent performs its analysis.
- [EXTERNAL_DOWNLOADS]: The skill relies on fetching data from various third-party domains (e.g., nvd.nist.gov, cisa.gov, reddit.com, pastebin.com) using Apify actors. While essential for threat intelligence, these represent ingestion of data from external sources.
- [SAFE]: The skill follows security best practices by recommending the use of environment variables for the Apify API token instead of hardcoding sensitive credentials.
Audit Metadata