The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a helper script (scripts/crawlora.sh) to execute curl commands for API data retrieval. The script implements security best practices, such as validating the API key format, using temporary configuration files with restricted permissions (chmod 600) to protect the key from being visible in the process list, and implementing a strict path whitelist for API routes.
[EXTERNAL_DOWNLOADS]: The skill fetches vehicle listing data from api.crawlora.net. This is the intended behavior of the skill for comparing market prices. The helper script prevents unauthorized local file disclosure by rejecting the @ character in query parameters, which prevents curl from reading local files into the request.
[DATA_EXPOSURE]: The skill requires a CRAWLORA_API_KEY provided via an environment variable. The helper script manages this key securely by writing it to a temporary configuration file that is automatically removed upon script completion or exit.

used-car-market-comparison