target-research

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local bash script (scripts/crawlora.sh) to perform network requests via curl.
  • Evidence: The script implements safe argument handling using --data-urlencode for query parameters and manages HTTP methods correctly.
  • [EXTERNAL_DOWNLOADS]: The skill connects to an external API endpoint to fetch product data.
  • Evidence: Network operations target https://api.crawlora.net/api/v1, which is the verified infrastructure for the author crawlora-org.
  • [CREDENTIALS_UNSAFE]: The skill follows secure practices for managing API keys.
  • Evidence: Authentication is performed using the CRAWLORA_API_KEY environment variable, avoiding hardcoded secrets in the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 06:52 PM
Security Audit — agent-trust-hub — target-research