zipcode-search
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocess.runto execute thecurlutility. This is used to perform HTTP GET requests to the official ePost search endpoint with user-supplied keywords. The implementation follows best practices by passing arguments as a list and utilizing--data-urlencodeto mitigate command injection risks. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
parcel.epost.go.kr, which is the official postal service domain of South Korea. This connection is necessary for the skill's primary function of retrieving up-to-date postal code information.
Audit Metadata