subway-lost-property

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The helper script scripts/subway_lost_property.py utilizes the subprocess module to execute the system curl command. This is used strictly for reachability testing (--verify-live) of official transit websites. The command construction uses argument lists and shlex.quote to ensure safe execution.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to official domains including www.lost112.go.kr (Korean National Police Agency lost and found) and www.seoulmetro.co.kr (Seoul Metro). These operations are used to verify service availability and are consistent with the skill's primary purpose of navigating official lost-and-found services.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 09:06 PM