Apify Ultimate Scraper

• Analyzed: May 12, 2026, 3:51 AM
• Findings: 1
• Version: 1.0.1
• Hash: 8693b6708453d54bb492317e79a5c5787e658e6786ce41541e42afcaf88f8457
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for web scraping via Apify Actors and includes robust security measures. The `SKILL.md` explicitly instructs the AI agent to sanitize all user-provided inputs (ACTOR_ID, SEARCH_KEYWORDS, JSON_INPUT, Output filenames) to prevent shell injection and path traversal. The `run_actor.js` script further enforces these protections with strong internal validation, notably `validateOutputPath` which strictly confines file writes to the current working directory, and `JSON.parse` for input validation. All network communication is restricted to `api.apify.com`, and there is no evidence of unauthorized data exfiltration, persistence mechanisms, or other malicious intent. The use of shell commands and file system access is directly aligned with the skill's stated purpose and is adequately secured.