crowdsec-service-api

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to interact with the official CrowdSec Service API at admin.api.crowdsec.net. These operations are well-defined and scoped to managing blocklists, allowlists, and firewall integrations.\n- [EXTERNAL_DOWNLOADS]: References the crowdsec-service-api Python package. This is a legitimate client library provided by the skill's author, crowdsecurity, for interacting with their cloud API.\n- [CREDENTIALS_UNSAFE]: The skill provides instructions for managing the SAPI key via the CROWDSEC_SAPI_KEY environment variable or a local configuration file at ~/.config/crowdsec/sapi_key. It explicitly guides the user to set restrictive permissions (0600) and emphasizes that keys should never be echoed or logged.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 06:23 AM
Security Audit — agent-trust-hub — crowdsec-service-api