website-monitoring

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a helper script to execute curl commands. The script includes comprehensive validation logic, including HTTP method whitelisting and anchored regex path matching, ensuring that only expected API interactions are possible.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's API at api.crawlora.net. These network requests are transparently documented and restricted to the functionality required for monitoring services.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices for API key management, retrieving the key from environment variables and passing it to the network client via a temporary, restricted-access configuration file to avoid exposure in the process tree.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:47 AM