fsc-corporate-info
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute its instruction set and updates from a specific package (@nomadamas/k-skill@0). This is an expected pattern for this skill's distribution model. - [COMMAND_EXECUTION]: The skill provides CLI commands for fetching instructions and executing a local Python helper script (
scripts/fsc_corporate_info.py). These commands are standard for its stated purpose of looking up business information. - [REMOTE_CODE_EXECUTION]: While the skill uses
npxto execute instructions, this is the primary mechanism for the skill's own lifecycle management rather than arbitrary remote code execution from untrusted sources. - [CREDENTIALS_SAFE]: The skill correctly avoids local storage of API keys. It explicitly states that the
DATA_GO_KR_API_KEYis managed server-side by thek-skill-proxyand not by the local user environment.
Audit Metadata