hipass-receipt
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill automates interactions with the official Korean Hi-Pass website (https://www.hipass.co.kr) for the purpose of viewing usage history and accessing receipts.
- [COMMAND_EXECUTION]: The skill uses a command-line interface tool,
hipass-receipt, to control browser sessions and query data. This is standard behavior for automation-focused skills and does not involve arbitrary command execution. - [EXTERNAL_DOWNLOADS]: The instructions recommend installing the
hipass-receiptpackage andplaywright-corevia the official npm registry. These are functional dependencies required for the skill's operation. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by explicitly stating that logins must be performed manually by the user in a controlled browser environment. It avoids requesting, storing, or transmitting sensitive authentication data like passwords or OTPs.
- [DATA_EXFILTRATION]: Network activity is restricted to the official service domain and local communication with the browser's remote debugging port (127.0.0.1:9222). No data is sent to unauthorized external servers.
Audit Metadata