tracking-brand-sentiment-across-platforms

• Outcome: Review
• Latest audit: Sep 3, 2026 · 6:38 AM UTC
• Version: 1.0.0

Overview

This skill mostly matches a social-listening workflow, but its Reddit collection steps appear to call a Twitter scraper, which users should review before relying on it.

Review and fix the Reddit actor before installing or relying on results. Only use this skill for monitoring terms you are comfortable sending to Apify-operated services, keep APIFY_TOKEN out of shared logs and shell history when possible, and store generated CSV/JSON outputs in a controlled location.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Description-Behavior Mismatch

Medium

• Confidence: 98% confidence
• Finding: The skill promises Twitter, Reddit, and TikTok coverage, but the documented Reddit path actually invokes the Twitter scraper. This can silently produce incorrect datasets and misleading sentiment conclusions while users believe they are receiving true cross-platform analysis. In a reputation-monitoring context, bad platform attribution can distort business decisions and incident response.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill does not clearly warn users that brand queries and retrieved social-media content are transmitted to third-party Apify-operated scrapers. This lack of disclosure can cause unintentional sharing of sensitive monitoring targets, campaign terms, or collected content with an external processor, which is a real privacy and governance risk in enterprise use.

Intent-Code Divergence

Medium

• Confidence: 99% confidence
• Finding: The step is labeled as Reddit but calls the Twitter scraper actor, which is a concrete documentation-to-execution mismatch. Users following the skill may unknowingly collect Twitter data under a Reddit label, leading to inaccurate analysis, faulty reporting, and potential compliance or audit issues if platform sourcing matters.

External Transmission

Medium

• Category: Data Exfiltration

Content

**REST API fallback — run each sequentially:**
```bash
# Twitter
curl -X POST "https://api.apify.com/v2/acts/apidojo~tweet-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{"searchTerms": ["[BRAND_NAME]"], "maxItems": 300}'

# Reddit
curl -X POST "https://api.apify.com/v2/acts/apidojo~tweet-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{"searches": ["[BRAND_NAME]"], "maxItems": 200, "sort": "new", "time": "month"}'

• Confidence: 92% confidence
• Finding: The documented curl command transmits brand search terms to an external Apify API endpoint using a bearer-equivalent token in the URL query string. External transmission is inherent to the skill, but exposing API usage this way can leak sensitive monitoring intent and increases credential exposure risk through logs, shell history, proxies, or monitoring systems.

External Transmission

Medium

• Category: Data Exfiltration

Content

**REST API fallback — run each sequentially:**
```bash
# Twitter
curl -X POST "https://api.apify.com/v2/acts/apidojo~tweet-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{"searchTerms": ["[BRAND_NAME]"], "maxItems": 300}'

# Reddit
curl -X POST "https://api.apify.com/v2/acts/apidojo~tweet-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{"searches": ["[BRAND_NAME]"], "maxItems": 200, "sort": "new", "time": "month"}'

• Confidence: 92% confidence
• Finding: The documented curl command transmits brand search terms to an external Apify API endpoint using a bearer-equivalent token in the URL query string. External transmission is inherent to the skill, but exposing API usage this way can leak sensitive monitoring intent and increases credential exposure risk through logs, shell history, proxies, or monitoring systems.

External Transmission

Medium

• Category: Data Exfiltration

Content

**REST API fallback — run each sequentially:**
```bash
# Twitter
curl -X POST "https://api.apify.com/v2/acts/apidojo~tweet-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{"searchTerms": ["[BRAND_NAME]"], "maxItems": 300}'

# Reddit
curl -X POST "https://api.apify.com/v2/acts/apidojo~tweet-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{"searches": ["[BRAND_NAME]"], "maxItems": 200, "sort": "new", "time": "month"}'

• Confidence: 92% confidence
• Finding: The documented curl command transmits brand search terms to an external Apify API endpoint using a bearer-equivalent token in the URL query string. External transmission is inherent to the skill, but exposing API usage this way can leak sensitive monitoring intent and increases credential exposure risk through logs, shell history, proxies, or monitoring systems.

Intent-Code Divergence

Medium

• Confidence: 99% confidence
• Finding: The REST fallback labels a request as Reddit but sends it to the Twitter scraper endpoint, reproducing the same cross-platform misrouting in an alternate execution path. Because fallback examples are often copied verbatim, this increases the chance that production usage sends the wrong queries and yields deceptive results.

Missing User Warnings

Low

• Confidence: 88% confidence
• Finding: The examples show saving results to CSV/JSON files without warning that the workflow may persist potentially sensitive social-media datasets to local disk. While file output is expected functionality, failing to disclose it can lead to accidental retention, broader access than intended, or leakage through shared workstations and repositories.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.