crw-migrate
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily documentation and does not contain any malicious code, obfuscation, or persistence mechanisms. All instructions are intended for configuration and verification of a legitimate service migration.- [COMMAND_EXECUTION]: Includes several
curlcommands used for verifying API functionality. These commands target the vendor's official domain (api.fastcrw.com) and are standard for API testing.- [EXTERNAL_DOWNLOADS]: Mentions usingnpx crw-mcpto run the vendor's MCP server. This involves downloading the package from the npm registry, which is the standard distribution method for this tool.- [CREDENTIALS_UNSAFE]: Correctly identifies where API keys should be placed using clear placeholders (e.g.,crw_live_...) and environment variable references (CRW_API_KEY), avoiding the exposure of actual secrets.
Audit Metadata