Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md See [`reference/endpoints.md`](reference/endpoints.md) for the complete generated endpoint list.
Security audit
sports-betting-research
Security checks for vulnerabilities and agentic risk
Overview
The skill is a scoped sports data lookup helper that sends requested sports queries to Crawlora and does not show hidden persistence, account access, or destructive behavior.
Install only if you are comfortable using a Crawlora API key and sending sports lookup parameters to Crawlora. Avoid putting secrets, personal information, or non-public account data into queries; use it for public research snapshots, not wagering decisions or account actions.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (8)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 88% confidence
- Finding
The skill includes shell command examples (
scripts/crawlora.sh ...) but does not declare any explicit tool scope such aspermissionsorallowed-tools. That mismatch can let an agent or runtime infer shell use without clear restriction, increasing the chance of unintended command execution or broader-than-necessary tool access if this skill is enabled in an environment with shell capabilities.- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The file exposes a very broad set of sports, betting, player, team, and event endpoints but does not define tight invocation boundaries in the endpoint reference itself. That increases the chance the skill is triggered for loosely related requests and unnecessarily sends user-derived queries to external services, expanding privacy and misuse risk.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The documentation states that requests are sent through Crawlora with an API key, but it does not warn that user-supplied terms, IDs, dates, and other request data will be transmitted to a third-party service. Without clear disclosure and minimization guidance, users may unknowingly provide sensitive or regulated information that leaves the local system boundary.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 94% confidence
- Finding
The skill is explicitly designed to call an external API endpoint, which creates a real external data transmission path for user-influenced inputs. In this sports-betting research context, the transmitted data is likely lower sensitivity than in financial or health skills, but external exfiltration risk still exists because free-text queries and identifiers may be sent off-platform.
- Content
md Endpoints this skill uses, grouped by platform. Call them via `scripts/crawlora.sh` (see SKILL.md). All paths are relative to the API base `https://api.crawlora.net/api/v1` and require the header `x-api-key: $CRAWLORA_API_KEY`. Path params like `{id}` are substituted into the URL; `GET` params go in the query string; `POST` params go in a JSON body. **134 endpoints across 4 platform group(s).**
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
sh #!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
sh #!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
Sudo/Root Execution
Medium
- Category
- Privilege Escalation
- Confidence
- 80% confidence
- Finding
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Content
sh # config supplies the header and is removed automatically on exit. umask 077 curl_config="$(mktemp "${TMPDIR:-/tmp}/crawlora-curl.XXXXXX")" chmod 600 "$curl_config" trap 'rm -f "$curl_config"' EXIT printf 'header = "x-api-key: %s"\n' "$CRAWLORA_API_KEY" >"$curl_config" auth=(--config "$curl_config")