The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a helper script scripts/crawlora.sh that uses curl to interact with the vendor's API. The script implements safe argument handling using set -euo pipefail and --data-urlencode to prevent common shell injection vulnerabilities when processing user-provided search terms.
[EXTERNAL_DOWNLOADS]: The skill makes network requests to api.crawlora.net to fetch Nike product data. As this is the vendor's primary API endpoint and corresponds to the skill's stated purpose, it is considered safe and functional.
[CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage their CRAWLORA_API_KEY using environment variables. It explicitly warns against hardcoding secrets in the documentation, which aligns with security best practices for credential management.

nike-research