ktx-booking
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of
korail2andpycryptodomeviapip. These are established libraries within the community for interacting with Korail services and performing cryptographic operations. - [COMMAND_EXECUTION]: The workflow involves executing a local Python helper script (
scripts/ktx_booking.py) to perform train searches, reservations, and cancellations. These operations are within the stated scope of the skill's functionality. - [SAFE_PRACTICE]: The skill manages sensitive Korail credentials using environment variables (
KSKILL_KTX_ID,KSKILL_KTX_PASSWORD) and provides a local dotenv file (~/.config/k-skill/secrets.env) as a fallback, which is consistent with standard secret management practices. - [DATA_EXPOSURE]: There is no evidence of data exfiltration or unauthorized access to sensitive system files. The network operations are limited to the legitimate Korail API via the
korail2library.
Audit Metadata