ev-subsidy-status
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes code from the NPM registry using
npx. Specifically, it targets the@nomadamas/k-skillandev-subsidy-statuspackages. It also references external instructions hosted on GitHub. These are vendor-owned resources provided by the skill author. - [COMMAND_EXECUTION]: Primary functionality is implemented through CLI commands executed via shell (
npx ev-subsidy-status). The skill uses these commands to query status, regions, and subsidy models. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes data from external web pages.
- Ingestion points: Data parsed from the government portal
ev.or.kr, including municipality notes from thestatus.notefield. - Boundary markers: The instructions include logic to interpret status labels conservatively and mandate safety warnings in the final response.
- Capability inventory: The skill possesses capabilities to execute shell commands and control browser sessions (Aside Browser, BrowserOS, or Chrome CDP).
- Sanitization: The skill extracts information via specific DOM selectors but does not detail explicit sanitization or escaping of the ingested text content.
Audit Metadata