job-market-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with
api.crawlora.net, which is the official infrastructure for the skill author (crawlora-org). All network operations are restricted to this vendor-controlled domain. - [SAFE]: Credential management follows security best practices. The skill instructions direct users to store the API key in an environment variable (
CRAWLORA_API_KEY) and include specific warnings against hardcoding or committing secrets to version control. - [SAFE]: The included bash utility
scripts/crawlora.shis a transparent wrapper forcurl. It uses safe shell practices, such asset -euo pipefailand proper argument quoting, to prevent command injection and unauthorized file access. - [SAFE]: The skill processes job market data from external sources (e.g., Indeed, Upwork, Fiverr). While this represents an ingestion of untrusted data, the skill acts as a research aggregator returning structured JSON, and no patterns suggesting the unsafe execution of this data were identified.
Audit Metadata