cheap-gas-nearby
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill collects user location information and transmits it to an external server at k-skill-proxy.nomadamas.org to facilitate fuel price lookups.
- [EXTERNAL_DOWNLOADS]: Core functionality relies on external infrastructure, including a third-party proxy domain and the cheap-gas-nearby Node.js package mentioned in the documentation.
- [PROMPT_INJECTION]: The skill ingests data from external APIs (Opinet and Kakao Map), creating a potential surface for indirect prompt injection. Ingestion points: Station addresses and fuel price details from external sources. Boundary markers: No explicit delimiters are used to separate external data from system instructions. Capability inventory: Network access and direct response generation. Sanitization: No input validation or output sanitization procedures are described for data retrieved from the APIs.
Audit Metadata