skills/cjakma/k-skill/ktx-booking/Gen Agent Trust Hub

ktx-booking

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of korail2 and pycryptodome via pip. These are established libraries within the community for interacting with Korail services and performing cryptographic operations.
  • [COMMAND_EXECUTION]: The workflow involves executing a local Python helper script (scripts/ktx_booking.py) to perform train searches, reservations, and cancellations. These operations are within the stated scope of the skill's functionality.
  • [SAFE_PRACTICE]: The skill manages sensitive Korail credentials using environment variables (KSKILL_KTX_ID, KSKILL_KTX_PASSWORD) and provides a local dotenv file (~/.config/k-skill/secrets.env) as a fallback, which is consistent with standard secret management practices.
  • [DATA_EXPOSURE]: There is no evidence of data exfiltration or unauthorized access to sensitive system files. The network operations are limited to the legitimate Korail API via the korail2 library.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 05:47 AM
Security Audit — agent-trust-hub — ktx-booking