skills/us/crw/crw-watch/Gen Agent Trust Hub

crw-watch

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate functionality for change tracking and content monitoring.
  • [SAFE]: Data handling is restricted to the skill's primary purpose: comparing web snapshots. Local storage is used appropriately for caching prior states in .crw/snapshot.json.
  • [SAFE]: Network operations are conducted via standard REST API calls to the vendor's infrastructure (fastcrw.com). These calls use environment variables for authentication, following security best practices.
  • [SAFE]: The inclusion of Bash(curl:*) and Bash(crw:*) in allowed-tools is consistent with the skill's documented behavior of using CLI tools for scraping and API interaction.
  • [SAFE]: No obfuscation, credential exfiltration, or persistence mechanisms were detected. Shell scripts provided as examples use jq to safely handle data interpolation, preventing common command injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 11:37 PM
Security Audit — agent-trust-hub — crw-watch