The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/crawlora.sh script executes shell commands but includes robust safety measures. It uses set -euo pipefail for strict error handling and implements comprehensive input validation for all parameters.
[EXTERNAL_DOWNLOADS]: The skill communicates exclusively with https://api.crawlora.net, which is the official API endpoint for the skill's authoring organization (crawlora-org). These requests are restricted to a predefined list of allowed routes and use only the GET method.
[CREDENTIALS_UNSAFE]: The skill follows security best practices for secret management. It requires the API key to be provided via an environment variable (CRAWLORA_API_KEY) and specifically avoids hardcoding or passing the key as a command-line argument. The helper script further secures the key by writing it to a temporary file with restricted permissions (chmod 600) before passing it to curl via a config file.
[DATA_EXFILTRATION]: No patterns of data exfiltration were detected. The skill only sends search queries and product IDs to the vendor's API and does not access sensitive local files or environment variables beyond the required API key.

walmart-research