Skills
Navigate
skills/nomadamas/k-skill/hwp/Gen Agent Trust Hub

hwp

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and run @nomadamas/k-skill and kordoc. These are vendor-owned packages consistent with the author 'nomadamas'.
  • [COMMAND_EXECUTION]: The skill executes shell commands to install dependencies (npm install) and run document processing tasks via npx and node. These commands are standard for the skill's stated purpose of document conversion.
  • [SAFE]: Hardcoded rules in SKILL.md explicitly prohibit unauthorized payments, credential storage, and bypassing identity boundaries, following security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:49 AM
Security Audit — agent-trust-hub — hwp