The Agent Skills Directory

[SAFE]: The skill uses a helper script (scripts/crawlora.sh) to interact with a legitimate vendor API (api.crawlora.net). The script correctly implements security best practices by requiring the API key to be set as an environment variable (CRAWLORA_API_KEY) rather than hardcoding it or passing it in URL parameters.- [SAFE]: Data access is limited to public X (Twitter) profiles and posts. No attempts to access private data, user credentials, or system files were found. All network operations are directed towards the vendor's own API domain.- [SAFE]: The implementation of command execution via curl in scripts/crawlora.sh uses proper argument handling (e.g., --data-urlencode) to prevent command injection from user-supplied parameters.

x-research