amazon-jobs-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a helper script (
scripts/crawlora.sh) to executecurlcommands. The script includes safe argument handling (--data-urlencode) to prevent command injection when passing user-provided parameters like search queries to the API. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage their API keys via the
CRAWLORA_API_KEYenvironment variable rather than hardcoding them, which is a standard and secure practice for local development and agent environments. - [EXTERNAL_DOWNLOADS]: The skill communicates with
api.crawlora.net, which is the official API endpoint for the skill's author (crawlora-org). This is legitimate and expected behavior for a skill designed to interface with this specific service.
Audit Metadata