Security audit
Security checks across malware telemetry and agentic risk
This skill does what it says: it uses a user's Apify account to run lead-generation scrapers and optionally save results locally, with no hidden persistence or unrelated local data access found.
Install this only if you intend to use Apify for scraping-based lead generation. Before each run, confirm the exact actor, target/source, input scope, result limit, cost, and output destination; use a least-privilege APIFY_TOKEN where possible and review platform terms and privacy laws before using scraped contact data for outreach.
This skill instructs the agent to select an Apify Actor, fetch its schema (via mcpc), and run scrapers. The included script communicates only with api.apify.com and writes outputs to files under the current working directory; it does not access unrelated system files or other environment variables. Apify Actors only scrape publicly available data and do not collect private or personally identifiable information beyond what is openly accessible on the target platforms. For additional security assurance, you can check an Actor's permission level by querying `https://api.apify.com/v2/acts/:actorId` — an Actor with `LIMITED_PERMISSIONS` operates in a restricted sandbox, while `FULL_PERMISSIONS` indicates broader system access. For full details, see [Apify's General Terms and Conditions](https://docs.apify.com/legal/general-terms-and-conditions). ## Error Handling
62/62 vendors flagged this skill as clean.
No suspicious patterns detected.
