household-waste-info
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references 'apis.data.go.kr', which is the official South Korean government data portal, and 'k-skill-proxy.nomadamas.org' for API key management. These are used for their intended purpose of fetching public utility information.
- [COMMAND_EXECUTION]: The skill documentation includes a sample 'curl' command to demonstrate how to interact with the proxy API. This command is a standard GET request used for data retrieval and does not involve risky operations like piping to a shell or executing downloaded scripts.
- [CREDENTIALS_UNSAFE]: The skill follows a secure pattern by explicitly stating that users should not store 'DATA_GO_KR_API_KEY' locally. Instead, it uses a proxy server to inject the necessary service keys, which is a recommended practice for protecting API credentials in client-side or agent environments.
- [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were detected. The skill only processes user-provided location names (city/district) to fetch public waste disposal schedules.
Audit Metadata