national-pension-workplace
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions recommend using
npxto download and run the@nomadamas/k-skillpackage for fetching full instructions and performing updates. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands (
npx) to interact with the skill's toolchain and management features. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes workplace coverage data retrieved from an external API via a proxy server.
- Ingestion points:
scripts/national_pension_workplace.py(fetches data from the proxy endpoint). - Boundary markers: Absent; the output is printed as raw JSON.
- Capability inventory: The skill performs network requests via
urllib.requestto a configured proxy or the default domainnomadamas.org. - Sanitization: Input parameters like business names and numbers are validated and URL-encoded before being sent to the proxy.
Audit Metadata