real-estate-autos-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local bash script
scripts/crawlora.shto facilitate API requests viacurl. The script is written using safe shell practices, such as quoting variables and using--data-urlencodeto prevent command injection through query parameters. - [EXTERNAL_DOWNLOADS]: The skill interacts with
api.crawlora.net, which is the official API endpoint for the skill author (crawlora-org). These network operations are consistent with the skill's primary purpose of retrieving market data. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by recommending the use of environment variables (
CRAWLORA_API_KEY) for authentication rather than hardcoding API keys in the instructions or scripts. - [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were found. The skill only sends requested parameters to the designated vendor API and returns the results to the agent.
Audit Metadata