website-monitoring
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a helper script to execute curl commands. The script includes comprehensive validation logic, including HTTP method whitelisting and anchored regex path matching, ensuring that only expected API interactions are possible.
- [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's API at
api.crawlora.net. These network requests are transparently documented and restricted to the functionality required for monitoring services. - [CREDENTIALS_UNSAFE]: The skill follows security best practices for API key management, retrieving the key from environment variables and passing it to the network client via a temporary, restricted-access configuration file to avoid exposure in the process tree.
Audit Metadata