apify-market-research
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). SKILL.md explicitly instructs running Apify actors that scrape public/user-generated sources (e.g., Facebook, Instagram, TripAdvisor listed in Step 1) and reference/scripts/run_actor.js downloads those actor-produced datasets via the Apify API (downloadResults/displayQuickAnswer) which the agent is expected to read and summarize, so untrusted third-party content can materially influence behavior.
Audit Metadata