·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 5. Classified findings closed: 2. Classified findings remaining: 3. Unclassified scanner findings remaining: 0. Review findings closed: 3. Review findings remaining: 16.
1
3
1
2
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | High | Closed | |
SKILL.md | Sensitive Data & Secret Exposure | Hardcoded secret | Medium | Closed | |
references/workflows/social-media-analytics.md | Tool & MCP Manipulation | MCP configuration abuse | Medium | Open | |
references/workflows/lead-generation.md | Tool & MCP Manipulation | MCP configuration abuse | Medium | Open | |
references/gotchas.md | Prompt Injection | Third-party content as instructions | Low | Open |
5 findings
AI-driven data extraction from ~100 Actors across 15+ platforms via the Apify CLI.
Rules for every apify command:
--json for machine-readable output (stable across CLI versions).--user-agent apify-agent-skills/apify-ultimate-scraper for telemetry attribution.2>/dev/null (stderr contains progress messages that break JSON parsers).npm install -g apify-cli)If a CLI command fails with an auth error, authenticate using one of these methods:
apify login (opens browser)export APIFY_TOKEN=your_token_hereGenerate token: https://console.apify.com/settings/integrations
Identify the target platform and use case. Read references/actor-index.md to find the right Actor.
If the task involves a multi-step pipeline, also read the matching workflow guide:
| Task involves... | Read |
|---|---|
leads, contacts, emails, B2B |
|
competitor, ads, pricing |
|
influencer, creator |
|
brand, mentions, sentiment |
|
reviews, ratings, reputation |
|
SEO, SERP, crawl, content, RAG |
|
analytics, engagement, performance |
|
trends, keywords, hashtags |
|
jobs, recruiting, candidates |
|
real estate, listings, hotels |
|
price monitoring, e-commerce, products |
|
contact enrichment, email extraction |
|
knowledge base, RAG, LLM data feed |
|
company research, due diligence |
|
If no Actor matches in the index, search dynamically:
From results: items[].username/items[].name (Actor ID), items[].title, items[].stats.totalUsers30Days, items[].currentPricingInfo.pricingModel.
Fetch the input schema dynamically:
Also read references/gotchas.md to check for common pitfalls for the selected Actor.
For Actor documentation: apify actors info "ACTOR_ID" --user-agent apify-agent-skills/apify-ultimate-scraper --readme
confirm output format (quick answer / CSV / JSON) and result count.
Standard run (blocking):
Prefer --input-file input.json for large or complex inputs.
From output: .id (run ID), .status, .defaultDatasetId, .stats.durationMillis
Fetch results:
For CSV: apify datasets get-items DATASET_ID --user-agent apify-agent-skills/apify-ultimate-scraper --format csv
Quick answer mode: Fetch results as JSON, pick top 5, present formatted in chat.
Save to file: Fetch results, use Write tool to save as YYYY-MM-DD_descriptive-name.csv or .json.
Large/long-running scrapes:
Poll: apify runs info RUN_ID --user-agent apify-agent-skills/apify-ultimate-scraper --json 2>/dev/null (check .status for SUCCEEDED).
Report: result count, file location (if saved), key data fields, and links:
https://console.apify.com/storage/datasets/DATASET_IDhttps://console.apify.com/actors/runs/RUN_IDFor multi-step workflows: suggest the next pipeline step from the workflow guide.
Common errors and pitfalls are documented in references/gotchas.md. Read it before running PPE (pay-per-event) Actors.
Get started with chainctlchainctl skill install public/apify/apify-ultimate-scraper:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/apify/skills/apify-ultimate-scraper:latest
Apache-2.0
HARDENING.md
SKILL.md
references/actor-index.md
references/gotchas.md
references/workflows/brand-monitoring.md
references/workflows/company-research.md
references/workflows/competitive-intel.md
references/workflows/contact-enrichment.md
references/workflows/content-and-seo.md
references/workflows/ecommerce-price-monitoring.md
references/workflows/influencer-vetting.md
references/workflows/job-market-and-recruitment.md
references/workflows/knowledge-base-and-rag.md
references/workflows/lead-generation.md
references/workflows/real-estate-and-hospitality.md
references/workflows/review-analysis.md
references/workflows/social-media-analytics.md
references/workflows/trend-research.md