music-release-landscape
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local shell script (
scripts/crawlora.sh) to facilitate interaction with the Crawlora API. The script is well-secured, using a temporary configuration file with restricted permissions (chmod 600) to pass credentials to curl via a header, and strictly validates both the API key format and the target API routes. - [DATA_EXFILTRATION]: The skill communicates with
api.crawlora.netto retrieve music catalog information. This is a vendor-owned service (crawlora-org) intended for the skill's primary functionality, and the script hardcodes the base URL to prevent unauthorized redirection.
Audit Metadata