craigslist
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill acts as an interface to the unbrowse.ai platform for searching Craigslist.
- [DATA_EXFILTRATION]: All network operations are directed to the developer's official domain (unbrowse.ai). The skill correctly instructs users to manage sensitive API keys via environment variables or secret managers rather than hardcoding them in configuration files.
- [COMMAND_EXECUTION]: The shell commands provided in the documentation (
claude mcp add,npx skills add,curl) are standard installation and testing procedures for the platform and do not contain malicious payloads. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data from Craigslist, it operates in a read-only capacity for its primary tool (
sapi_craigslist_org__get_search_full) and emphasizes verifying results through the proxy service, which minimizes the impact of potential injection in the fetched data.
Audit Metadata