target-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local bash script (
scripts/crawlora.sh) to perform network requests viacurl. - Evidence: The script implements safe argument handling using
--data-urlencodefor query parameters and manages HTTP methods correctly. - [EXTERNAL_DOWNLOADS]: The skill connects to an external API endpoint to fetch product data.
- Evidence: Network operations target
https://api.crawlora.net/api/v1, which is the verified infrastructure for the authorcrawlora-org. - [CREDENTIALS_UNSAFE]: The skill follows secure practices for managing API keys.
- Evidence: Authentication is performed using the
CRAWLORA_API_KEYenvironment variable, avoiding hardcoded secrets in the source code.
Audit Metadata