seoul-density
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and run the
@nomadamas/k-skillpackage from the NPM registry to retrieve the primary instructions and helper files. - [REMOTE_CODE_EXECUTION]: The skill uses
npxto execute remote code from the author's official NPM package for various operations, including instruction fetching (instruct), file listing (files), and executing the main Python script (exec). - [COMMAND_EXECUTION]: The skill prompts the agent to execute shell commands using
npxand Python to interact with the location data script located atscripts/seoul_density.py. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes real-time data from an external API proxy (
k-skill-proxy.nomadamas.org), which could theoretically contain malicious instructions if the upstream source or proxy is compromised. - Ingestion points: API responses fetched using
urllib.requestinscripts/seoul_density.py. - Boundary markers: Absent; the script outputs the parsed data directly to the agent's context without delimiters.
- Capability inventory: The script performs network GET requests and outputs formatted strings to the terminal.
- Sanitization: The script performs JSON parsing and extracts specific fields (e.g.,
AREA_CONGEST_LVL,AREA_PPLTN_MIN) rather than passing the raw response.
Audit Metadata