seoul-subway-arrival

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @nomadamas/k-skill package from the NPM registry. This is a vendor-owned resource used to provide instructions and manage skill file updates.
  • [COMMAND_EXECUTION]: The skill relies on shell commands like npx for CLI interaction and curl to fetch transit data from the vendor's proxy endpoint.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external transit data, which is a potential ingestion surface for indirect instructions.
  • Ingestion points: Station arrival data retrieved from k-skill-proxy.nomadamas.org in the instruction.md workflow.
  • Boundary markers: None explicitly defined in the instructions for the agent to separate data from instructions.
  • Capability inventory: The skill uses curl for network requests and npx for command execution.
  • Sanitization: There are no specific sanitization or validation steps described for the incoming transit API response.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:50 AM
Security Audit — agent-trust-hub — seoul-subway-arrival