The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes a local helper script, scripts/crawlora.sh, to interact with the Crawlora API. This script includes several security safeguards: it validates the API key format, restricts API calls to a specific whitelist of Flashscore routes, and rejects potentially dangerous shell characters in the path.\n- [EXTERNAL_DOWNLOADS]: Fetches match statistics and reports from api.crawlora.net. These network operations are consistent with the skill's stated purpose and target the vendor's own infrastructure.\n- [CREDENTIALS_UNSAFE]: The skill requires a CRAWLORA_API_KEY. The helper script implements best practices for secret handling by reading the key from an environment variable and passing it to curl via a temporary configuration file with restricted filesystem permissions, preventing the key from appearing in the system's process table.\n- [DATA_EXFILTRATION]: No signs of data exfiltration were found. The tool is designed to perform read-only operations (GET requests) against authorized vendor endpoints, and it safely encodes user-provided query parameters using curl's built-in URL encoding mechanism.

flashscore-match-analysis