hm-research
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The helper script
scripts/crawlora.shimplements robust security controls, including path allow-listing and environment variable validation. - [SAFE]: API credentials are handled securely using temporary configuration files with restricted permissions, preventing exposure in process lists.
- [SAFE]: The skill communicates exclusively with the author's official API domain (
api.crawlora.net). - [SAFE]: Query parameters are properly URL-encoded using
curlbuilt-ins to prevent parameter injection.
Audit Metadata