daangn-jobs-search
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute instructions and helper files from the author's package@nomadamas/k-skill. This allows the skill to load logic dynamically that is not present in the local repository. - [REMOTE_CODE_EXECUTION]: The skill invokes the vendor's CLI via
npx -y @nomadamas/k-skill@0, which downloads and runs code from the npm registry at runtime to perform its tasks. - [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/daangn_jobs.py) to perform search and detail retrieval tasks on the Daangn website. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted job posting data from the Daangn website, which could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: The
scripts/daangn_jobs.pyfile fetches JSON and HTML content viafetch_jsonandfetch_textfunctions hittingdaangn.comendpoints. - Boundary markers: There are no explicit instruction delimiters or 'ignore embedded instructions' warnings defined in the
instruction.mdto protect the agent when processing the results. - Capability inventory: The skill possesses network request capabilities via Python's
urllib.requestand shell command execution capabilities vianpx. - Sanitization: The script uses
html.unescapefor basic entity conversion of scraped content but lacks comprehensive sanitization or validation to prevent prompt injection attacks.
Audit Metadata