The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill makes requests to api.crawlora.net, which is the official API endpoint for the skill's vendor, crawlora-org. These network operations are intended for the skill's primary purpose of fetching product data and do not involve sensitive information.
[COMMAND_EXECUTION]: The skill includes a shell script (scripts/crawlora.sh) that wraps curl to facilitate API requests. The script implements safe parameter handling using set -euo pipefail and --data-urlencode to prevent common shell injection vulnerabilities.
[CREDENTIALS_UNSAFE]: The documentation correctly instructs the user to provide an API key via an environment variable (CRAWLORA_API_KEY) rather than hardcoding it, which is a standard and safe security practice.

samsclub-research