Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Apify/Urban Dictionary lookup guide; it sends query terms to Apify but does not install code, persist, or access local data.
Install only if you are comfortable sending slang keywords, brand names, or Urban Dictionary URLs to Apify/apidojo. Do not use it for secrets, confidential project names, personal data, or sensitive internal monitoring terms without a separate privacy review.
The trigger language is broad enough to match many ordinary requests about word meanings, social media terminology, brand monitoring, and cultural vocabulary. In an agent environment, this can cause the skill to activate unexpectedly and send user queries to an external service, increasing the risk of unintended data disclosure and tool overreach.
The skill instructs use of an external Apify actor but does not clearly warn that user-provided keywords or URLs will be transmitted to a third-party service. If users submit sensitive brand names, internal project codenames, or personal terms, that data may be exposed outside the local agent boundary without informed consent.
This skill performs an outbound POST request to the Apify API, transmitting supplied search terms to a third-party endpoint. Even though external calls are core to the skill's function, the transmission becomes a security issue when there is no explicit consent, minimization, or warning around potentially sensitive input.
curl -X POST "https://api.apify.com/v2/acts/apidojo~urbandictionary-scraper/runs" \
-H "Authorization: Bearer $APIFY_TOKEN" \
-H "Content-Type: application/json" \
-d '{"keywords": ["slay", "rizz", "no cap"], "maxItems": 5}'
This skill performs an outbound POST request to the Apify API, transmitting supplied search terms to a third-party endpoint. Even though external calls are core to the skill's function, the transmission becomes a security issue when there is no explicit consent, minimization, or warning around potentially sensitive input.
curl -X POST "https://api.apify.com/v2/acts/apidojo~urbandictionary-scraper/runs" \
-H "Authorization: Bearer $APIFY_TOKEN" \
-H "Content-Type: application/json" \
-d '{"keywords": ["slay", "rizz", "no cap"], "maxItems": 5}'
No suspicious patterns detected.