seoul-subway-arrival
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@nomadamas/k-skillpackage from the NPM registry. This is a vendor-owned resource used to provide instructions and manage skill file updates. - [COMMAND_EXECUTION]: The skill relies on shell commands like
npxfor CLI interaction andcurlto fetch transit data from the vendor's proxy endpoint. - [INDIRECT_PROMPT_INJECTION]: The skill processes external transit data, which is a potential ingestion surface for indirect instructions.
- Ingestion points: Station arrival data retrieved from
k-skill-proxy.nomadamas.orgin theinstruction.mdworkflow. - Boundary markers: None explicitly defined in the instructions for the agent to separate data from instructions.
- Capability inventory: The skill uses
curlfor network requests andnpxfor command execution. - Sanitization: There are no specific sanitization or validation steps described for the incoming transit API response.
Audit Metadata