tesla-jobs-research

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a bash helper script, scripts/crawlora.sh, which executes curl to interact with the Crawlora API. This script is used to fetch job data and is the primary mechanism for the skill's functionality. It correctly handles arguments using arrays to prevent shell injection.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to api.crawlora.net to retrieve job listings and details. This domain is the official API endpoint for the skill's vendor, crawlora-org.
  • [CREDENTIALS_UNSAFE]: The skill uses an environment variable CRAWLORA_API_KEY for authentication. The documentation correctly instructs users to manage this key via environment variables and specifically warns against hardcoding or committing secrets, adhering to security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 06:52 PM
Security Audit — agent-trust-hub — tesla-jobs-research