football-viewing-guide
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a helper script for network requests that implements rigorous validation. It restricts execution to a specific list of allowed API routes and employs safe encoding for all user-supplied parameters.
- [DATA_EXFILTRATION]: API communication is limited to the vendor's official domain. The skill ensures the CRAWLORA_API_KEY is handled securely by using a temporary configuration file with restricted file permissions, preventing exposure in process logs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes match information from external data sources. The potential for indirect prompt injection is minimized as the skill is designed only to display and filter this data, lacking any dangerous capabilities that could be exploited by malicious input content.
Audit Metadata