fsc-corporate-info

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute its instruction set and updates from a specific package (@nomadamas/k-skill@0). This is an expected pattern for this skill's distribution model.
  • [COMMAND_EXECUTION]: The skill provides CLI commands for fetching instructions and executing a local Python helper script (scripts/fsc_corporate_info.py). These commands are standard for its stated purpose of looking up business information.
  • [REMOTE_CODE_EXECUTION]: While the skill uses npx to execute instructions, this is the primary mechanism for the skill's own lifecycle management rather than arbitrary remote code execution from untrusted sources.
  • [CREDENTIALS_SAFE]: The skill correctly avoids local storage of API keys. It explicitly states that the DATA_GO_KR_API_KEY is managed server-side by the k-skill-proxy and not by the local user environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 02:40 PM