crw-watch
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate functionality for change tracking and content monitoring.
- [SAFE]: Data handling is restricted to the skill's primary purpose: comparing web snapshots. Local storage is used appropriately for caching prior states in
.crw/snapshot.json. - [SAFE]: Network operations are conducted via standard REST API calls to the vendor's infrastructure (
fastcrw.com). These calls use environment variables for authentication, following security best practices. - [SAFE]: The inclusion of
Bash(curl:*)andBash(crw:*)inallowed-toolsis consistent with the skill's documented behavior of using CLI tools for scraping and API interaction. - [SAFE]: No obfuscation, credential exfiltration, or persistence mechanisms were detected. Shell scripts provided as examples use
jqto safely handle data interpolation, preventing common command injection vulnerabilities.
Audit Metadata