movie-tv-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for API key management, instructing users to use environment variables rather than hardcoding credentials. No malicious patterns or bypass attempts were found.
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.crawlora.netto retrieve movie metadata. This is the official API domain for the skill author,crawlora-org, and represents legitimate functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from various external platforms (IMDb, Rotten Tomatoes, etc.) retrieved via the Crawlora API.
- Ingestion points: JSON payloads returned from
api.crawlora.netendpoints. - Boundary markers: None are explicitly defined in the skill instructions to separate external data from agent instructions.
- Capability inventory: The skill uses a local shell script
scripts/crawlora.shto executecurlandjqfor data retrieval and processing. - Sanitization: No specific sanitization or filtering of the external API data is performed before it is presented to the agent.
Audit Metadata