naver-api
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@kood/naver-api-clipackage from the public npm registry. This is a standard installation procedure for the CLI tool required by the skill's primary functionality. - [COMMAND_EXECUTION]: The skill uses shell commands to install the CLI and execute API requests (
naver-api search,naver-api trends). It includes clear instructions to verify the environment (Node.js version check) before execution. - [SAFE]: The skill implements robust security measures for handling sensitive data. It explicitly forbids placing credentials in command arguments, logs, or chat output. It instructs the agent to use interactive prompts or stdin for credential configuration, ensuring secrets are not persisted in the command history or project files.
- [SAFE]: The instructions include a safety-conscious 'instruction_contract' that mandates treating API results as evidence rather than instructions, which mitigates the risk of indirect prompt injection from external data sources.
Audit Metadata