apify-competitor-intelligence
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The script
reference/scripts/run_actor.jstransmits theAPIFY_TOKENas a query parameter in several API requests (e.g.,https://api.apify.com/v2/acts/...?token=...). Credential transmission in URLs is an insecure practice as it can lead to exposure in server logs, proxy logs, and command-line history. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes content scraped from external websites and social media platforms.
- Ingestion points: Data retrieved from various Apify Actors (as described in Step 5 of
SKILL.md) is directly provided to the agent for summarization. - Boundary markers: Absent. The instructions do not specify using delimiters or provide warnings to ignore embedded instructions within the scraped content.
- Capability inventory: The agent utilizes shell execution capabilities to run the analysis scripts and the
mcpcutility. - Sanitization: Absent. The raw scraped data is passed to the agent for synthesis without prior filtering or escaping.
Audit Metadata