skills/bedesj/k-skill/zipcode-search/Gen Agent Trust Hub

zipcode-search

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Python's subprocess.run to execute the curl utility. This is used to perform HTTP GET requests to the official ePost search endpoint with user-supplied keywords. The implementation follows best practices by passing arguments as a list and utilizing --data-urlencode to mitigate command injection risks.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to parcel.epost.go.kr, which is the official postal service domain of South Korea. This connection is necessary for the skill's primary function of retrieving up-to-date postal code information.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 01:00 AM
Security Audit — agent-trust-hub — zipcode-search