I connected my audit Actor to Claude, and it audited three packages nobody asked for

Описание и применение

Исправление схемы ввода в Apify Actor, подключенном к Claude, остановило автоматический аудит не запрашиваемых пакетов, выравнивая результаты с намерениями пользователя.

Задача

Audit Actors were unintentionally exposing additional package data due to an input schema misconfiguration, leading to unexpected audit results.

Результат

Correcting the input schema stopped the Actor from auditing unintended packages, aligning audit outputs with caller intent and improving reliability.

Рабочий процесс

• 1. Connect the Actor to Claude using the Apify MCP command with the ?tools parameter to expose only the desired tool.
• 2. Authenticate via OAuth; handle terminal requirement by running the CLI in a fresh console or batch file.
• 3. Send a minimal JSON input specifying only the desired repository.
• 4. Observe that the platform expands the input to include default packages due to the schema.
• 5. Identify the misconfiguration in the input schema (prefill vs default).
• 6. Update the schema to use "default" for packages, removing unintended prefilled entries.
• 7. Re-run the audit to confirm only the requested repository is processed.

Доказательства

The platform actually stored: ... "packages":["npm:request","npm:babel-eslint","npm:left-pad"] ...

Источник

The cause is one line in my own input schema, written months earlier.

Источник