Apify Actor Browse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly calls the public Apify marketplace via the apify-admin action search_actors (SKILL.md Execution step 1) to ingest actor names/descriptions/metadata—third-party, user-published content that the agent reads and uses to make recommendations, so it can be a vector for indirect prompt injection.