Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Crawlora API helper for tech-stack prospecting, with expected external API use and no evidence of hidden persistence, privilege escalation, destructive behavior, or unrelated local data access.
Install this only if you are comfortable sending prospecting queries, selected company domains or URLs, live-check request bodies, and your Crawlora API key to Crawlora. Keep live checks scoped to user-approved shortlists and do not treat exported prospect lists as permission for outreach or CRM writes.
#!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. #
#!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
#!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
#!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
#!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
# Keep the API key out of the curl process command line. A private temporary
# config supplies the header and is removed automatically on exit.
curl_config="$(mktemp "${TMPDIR:-/tmp}/crawlora-curl.XXXXXX")"
chmod 600 "$curl_config"
trap 'rm -f "$curl_config"' EXIT
printf 'header = "x-api-key: %s"\n' "$CRAWLORA_API_KEY" >"$curl_config"
auth=(--config "$curl_config")[ -n "$body" ] || body='{}'
# Stream the body on stdin so curl never interprets a user value as its
# @file shorthand (and cannot read local files supplied in a request body).
printf '%s' "$body" | curl -fsS -X "$method" "${auth[@]}" \
-H "Content-Type: application/json" --data-binary @- "${base}${path}"
fiNo suspicious patterns detected.