apify-brand-reputation-monitoring

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly runs Apify actors that scrape public, user-generated content (see SKILL.md actor list: Google Maps, TripAdvisor, Facebook, Instagram, YouTube, TikTok) and run_actor.js fetches the dataset items from https://api.apify.com/v2/datasets/{datasetId}/items and displays/summarizes the top results, so untrusted third‑party content is ingested and can directly influence agent outputs/actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 08:44 AM