business-review-trust-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill utilizes an API key to authenticate requests sent to api.crawlora.net. This domain belongs to the skill's author, crawlora-org, and the communication represents standard intended functionality for this service wrapper.
- [PROMPT_INJECTION]: The skill ingests untrusted data from third-party platforms (Product Hunt, Trustpilot, Capterra) which can contain user-generated content.
- Ingestion points: External review and product data retrieved via the scripts/crawlora.sh script.
- Boundary markers: Absent; there are no specific instructions for the agent to treat the fetched JSON results as non-executable data.
- Capability inventory: The skill provides network access via curl to reach the Crawlora API.
- Sanitization: None; the script returns the raw API response to the agent context without additional filtering.
Audit Metadata