The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/crawlora.sh script executes curl to interact with the Crawlora API. The script uses shell arrays and the --data-urlencode flag to safely handle query parameters, preventing basic command injection via URL arguments.
[CREDENTIALS_UNSAFE]: The skill uses an environment variable CRAWLORA_API_KEY for authentication. The documentation correctly instructs users to set this variable and warns against hardcoding secrets, following standard security best practices.
[EXTERNAL_DOWNLOADS]: The skill makes network requests to api.crawlora.net. These are directed to the vendor's official API for the stated purpose of the skill and do not involve downloading executable code or scripts.

book-research