cricket-data
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches real-time cricket scores and news from ESPN's public endpoints (site.api.espn.com) and historical match data from Cricsheet (cricsheet.org). These are well-known and legitimate services for sports data.
- [COMMAND_EXECUTION]: Utilizes the 'sports-skills' CLI tool (a vendor-provided resource) and a local validation script (scripts/validate_params.sh) to process data requests and ensure parameter integrity.
- [DATA_EXFILTRATION]: No exfiltration patterns were detected. The skill does not access sensitive local files, environment variables, or credentials; its network activity is strictly limited to querying sports information.
Audit Metadata