mlb-statcast-player-comparison

• Outcome: Pass
• Latest audit: Oct 5, 2026 · 2:25 AM UTC
• Version: 1.0.0

Overview

This skill is a narrowly scoped MLB statistics helper that clearly uses a Crawlora API key and external Crawlora requests for its stated purpose.

Install only if you are comfortable using Crawlora for MLB Statcast queries. Set CRAWLORA_API_KEY from a secret-safe place, avoid logging it, and use the skill only for MLB-related identifiers and query parameters rather than unrelated personal or confidential data.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (8)

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence

Finding

The skill invokes shell-based functionality via the bundled scripts/crawlora.sh but does not declare any explicit tool scope such as permissions or allowed-tools. That creates an avoidable trust gap: an agent or reviewer cannot clearly tell what execution and network capabilities the skill requires, which increases the risk of over-broad tool use or unintended command execution in environments that honor explicit scoping.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 84% confidence

Finding

This file clearly defines an external network destination and the required authentication header, meaning use of the skill will transmit data and credentials to a third-party API. While outbound API use is expected for this skill's purpose, the security risk is real in agent environments because improper invocation could expose user-supplied data, metadata, or secrets to an external system.

Content

Scanner excerpt · reference/endpoints.md (reported line 7)May include surrounding context.

md

Only the endpoints used by this workflow. Call them via `scripts/crawlora.sh` (see SKILL.md).

All paths are relative to the API base `https://api.crawlora.net/api/v1` and require the header `x-api-key: $CRAWLORA_API_KEY`. Path params like `{id}` are substituted into the URL; `GET` params go in the query string; `POST` params go in a JSON body.

**12 endpoints across 1 platform group(s).**

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The file instructs callers to use an API key and send requests to an external service but provides no warning about outbound data transfer, secret handling, or restrictions on what may be transmitted. In an agent context, this can lead to users or downstream tooling invoking network calls without understanding that prompts, identifiers, or derived data may leave the local environment and that credentials must be protected.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 12)May include surrounding context.

md

#!/usr/bin/env bash
# Crawlora REST helper — minimal, dependency-free (curl only).
# Calls https://api.crawlora.net/api/v1 with your Crawlora API key.
# Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills.
#
# Usage:

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/crawlora.sh (reported line 3)May include surrounding context.

sh

#!/usr/bin/env bash
# Crawlora REST helper — minimal, dependency-free (curl only).
# Calls https://api.crawlora.net/api/v1 with your Crawlora API key.
# Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills.
#
# Usage:

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/crawlora.sh (reported line 20)May include surrounding context.

sh

#!/usr/bin/env bash
# Crawlora REST helper — minimal, dependency-free (curl only).
# Calls https://api.crawlora.net/api/v1 with your Crawlora API key.
# Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills.
#
# Usage:

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · scripts/crawlora.sh (reported line 94)May include surrounding context.

sh

# config supplies the header and is removed automatically on exit.
umask 077
curl_config="$(mktemp "${TMPDIR:-/tmp}/crawlora-curl.XXXXXX")"
chmod 600 "$curl_config"
trap 'rm -f "$curl_config"' EXIT
printf 'header = "x-api-key: %s"\n' "$CRAWLORA_API_KEY" >"$curl_config"
auth=(--config "$curl_config")

Vague Triggers

Low

• Category: Not specified by scanner
• Confidence: 84% confidence

Finding

This markdown file says the endpoints are used by 'this workflow' and should be called via a script, but it does not define any explicit activation phrases, scope boundaries, or negative examples for invoking the related skill/workflow. In markdown files, missing specificity on trigger scope can cause overly broad or unclear activation behavior.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.