shop-app-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local shell script (
scripts/crawlora.sh) to communicate with the Crawlora API (api.crawlora.net). This is the expected and legitimate behavior for the skill's stated purpose of providing shop research capabilities. - [SAFE]: API credentials are managed securely via the
CRAWLORA_API_KEYenvironment variable. The documentation explicitly instructs users to avoid hardcoding or committing the key, adhering to standard security practices. - [SAFE]: The helper script uses
curlwith--data-urlencodefor GET parameters, ensuring that user-provided query strings are safely transmitted and reducing the risk of unexpected URI behavior. - [SAFE]: No obfuscation, unauthorized data access, or persistence mechanisms were detected in the scripts or documentation files.
Audit Metadata