The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a bundled shell script scripts/crawlora.sh to facilitate API requests via curl. The script implements comprehensive security controls:
Strict validation of the CRAWLORA_API_KEY format using shell pattern matching.
An allow-list for HTTP methods (GET/POST) enforced both globally and per-route.
Path validation using anchored regular expressions and character filtering to prevent path traversal or route smuggling.
Use of set -euo pipefail for robust error handling.
[CREDENTIALS_UNSAFE]: The skill requires an API key provided through the CRAWLORA_API_KEY environment variable. The implementation follows security best practices by writing the key to a temporary configuration file with restricted permissions (chmod 600) which is then passed to curl via the --config flag. This prevents the sensitive key from being exposed in process lists (e.g., via ps).
[DATA_EXFILTRATION]: The skill communicates with the vendor's API at api.crawlora.net. The shell script specifically guards against local file disclosure vulnerabilities in curl by:
Rejecting the @ character in query string parameters to prevent curl from interpreting them as file paths.
Using the @- syntax to pipe POST bodies from stdin, ensuring curl does not attempt to read from the local filesystem.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from the TrustMRR marketplace and public websites via a scraping endpoint.
Ingestion points: Marketplace data retrieved via crawlora.sh (e.g., /datasets/trustmrr/search) and web content via /web/scrape (referenced in SKILL.md).
Boundary markers: The instructions explicitly direct the agent to separate payment-provider-verified revenue from seller claims and its own calculations.
Capability inventory: The skill is limited to read-only API calls and web scraping via the validated shell script; it has no file-write or system-modifying capabilities.
Sanitization: The API script enforces strict path and method validation for all outgoing requests.

startup-acquisition-research