localdata-business-status
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches business status data in CSV format from the official Korean government portal (file.localdata.go.kr). This is a well-known service and the primary data source for the skill's intended purpose.
- [REMOTE_CODE_EXECUTION]: Utilizes npx to run the @nomadamas/k-skill CLI framework for skill management, updates, and execution. This is the designated framework for skills from this author and is consistent with the skill's design.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external CSV data, which constitutes a surface for indirect prompt injection. The risk is minimized by the use of a trusted government source and structured data parsing.
- Ingestion points: The scripts/localdata_business_status.py script downloads CSV files containing business records.
- Boundary markers: Results are returned as structured JSON data, and the script filters content based on specific search parameters.
- Capability inventory: The skill performs network requests to the government portal and writes to a local cache directory in the user's home folder.
- Sanitization: Data is parsed using the standard Python csv module, which handles field values as literal strings without code execution.
Audit Metadata