skills/us/crw/crw-migrate/Gen Agent Trust Hub

crw-migrate

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily documentation and does not contain any malicious code, obfuscation, or persistence mechanisms. All instructions are intended for configuration and verification of a legitimate service migration.- [COMMAND_EXECUTION]: Includes several curl commands used for verifying API functionality. These commands target the vendor's official domain (api.fastcrw.com) and are standard for API testing.- [EXTERNAL_DOWNLOADS]: Mentions using npx crw-mcp to run the vendor's MCP server. This involves downloading the package from the npm registry, which is the standard distribution method for this tool.- [CREDENTIALS_UNSAFE]: Correctly identifies where API keys should be placed using clear placeholders (e.g., crw_live_...) and environment variable references (CRW_API_KEY), avoiding the exposure of actual secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 10:03 PM
Security Audit — agent-trust-hub — crw-migrate