The Agent Skills Directory

[SAFE]: No security issues were detected. The skill is designed with security best practices in mind, including robust input validation and restricted execution scope.\n- [COMMAND_EXECUTION]: The skill uses a bash helper scripts/crawlora.sh which includes extensive validation. It restricts API keys to specific alphanumeric characters, enforces a path allowlist using regular expressions to prevent directory traversal, and prohibits the use of the '@' character in arguments to prevent local file inclusion or data leakage through curl's file-reading features.\n- [EXTERNAL_DOWNLOADS]: Requests are directed to api.crawlora.net, which is the official API for the skill's vendor. This communication is legitimate for the skill's purpose and does not involve the execution of untrusted remote code.

zappos-research