hm-research

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The helper script scripts/crawlora.sh implements robust security controls, including path allow-listing and environment variable validation.
  • [SAFE]: API credentials are handled securely using temporary configuration files with restricted permissions, preventing exposure in process lists.
  • [SAFE]: The skill communicates exclusively with the author's official API domain (api.crawlora.net).
  • [SAFE]: Query parameters are properly URL-encoded using curl built-ins to prevent parameter injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 11:53 AM