kamis-food-price
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the NPM registry to download and execute the vendor's CLI tool (
@nomadamas/k-skill) for retrieving updated instructions and file bundles. - [COMMAND_EXECUTION]: The instructions direct the agent to run
npxcommands for setup and updates, and provide a Python script (run_kamis.py) to perform the actual data retrieval. - [DATA_EXPOSURE]: The provided Python script reads configuration from
~/.config/k-skill/secrets.envto manage user-provided API keys for direct service access. This is a standard and safe practice for CLI tool configuration. - [SAFE]: The skill includes explicit 'Hard rules' that prohibit the execution of payments, storage of plaintext credentials, or bypassing of safety boundaries like CAPTCHAs.
Audit Metadata