The Agent Skills Directory

[SAFE]: The skill uses the CRAWLORA_API_KEY environment variable for authentication, which is a standard and secure practice for managing secrets in agent skills, avoiding hardcoded credentials.
[SAFE]: All network operations are performed via scripts/crawlora.sh targeting api.crawlora.net, which is the official API endpoint for the vendor 'crawlora-org'. This is consistent with the skill's stated purpose.
[SAFE]: The shell script scripts/crawlora.sh is a minimal wrapper around curl that uses set -euo pipefail and properly quotes variables to prevent command injection. It correctly uses --data-urlencode for GET parameters to handle special characters safely.
[SAFE]: No obfuscation, persistence mechanisms, privilege escalation, or prompt injection patterns were found in the instructions or scripts.

oldnavy-research