yahoo-network-research
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the Crawlora API to access public Yahoo content. All external requests are directed to the vendor's own API domain (
api.crawlora.net). - [CREDENTIALS_SAFE]: The skill correctly instructs users to store their API key in an environment variable (
CRAWLORA_API_KEY) and explicitly warns against hardcoding or committing credentials in its documentation. - [COMMAND_EXECUTION]: The provided helper script
scripts/crawlora.shusescurlto make API requests. It implements safe practices such as--data-urlencodeto prevent command injection from user-provided arguments. - [DATA_EXPOSURE]: The skill only accesses public editorial content (News, Sports, Shopping) and does not attempt to access sensitive local files or private user data.
Audit Metadata