delivery-tracking

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill fetches delivery tracking pages and APIs from CJ Logistics and Post Office (https://www.cjlogistics.com/ko/tool/parcel/tracking and https://service.epost.go.kr/...), which ingest package tracking data that may contain arbitrary sender, receiver, and status memo text authored by third parties.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to run an external npx command (@nomadamas/k-skill) to fetch runtime instructions and behavior-selecting configuration from an unofficial GitHub-backed repository, presenting a weak/unknown external dependency.