real-estate-autos-research
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a dedicated shell script (
scripts/crawlora.sh) to communicate with the Crawlora API. The script demonstrates high security awareness by using a temporary, restricted-permission configuration file to pass theCRAWLORA_API_KEYto cURL, ensuring the sensitive key is never exposed in process listings or command-line arguments. Additionally, it implements a strict allow-list for API routes using regular expressions and string matching, effectively preventing the agent from accessing unintended or unauthorized endpoints. The script also includes safeguards against common injection attacks by URL-encoding all query parameters and explicitly blocking the@character to prevent cURL from unintentionally reading local files.
Audit Metadata