indeed-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with
api.crawlora.net, which is the official API endpoint for the skill author's organization,crawlora-org. This is standard functionality for an API-integrated skill. - [COMMAND_EXECUTION]: The
scripts/crawlora.shhelper script usescurlto perform network requests. The script includes safe handling of arguments using--data-urlencodeto prevent command injection via URL parameters. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage their API keys via an environment variable (
CRAWLORA_API_KEY) and explicitly warns against hardcoding or committing secrets inSKILL.md.
Audit Metadata