nts-tax-delinquency
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the official South Korean National Tax Service domain (nts.go.kr) to retrieve public tax delinquency data as its primary function.
- [COMMAND_EXECUTION]: The skill instructions provide npx commands to manage instructions and updates through the @nomadamas/k-skill package, which is a standard procedure for this skill's ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a public government website. It mitigates potential injection risks by parsing the HTML via a dedicated Python script that strips tags and structures the result as JSON. Evidence Chain: Ingestion point (scripts/nts_tax_delinquency.py), Boundary markers (Absent in text, structured JSON used), Capability inventory (Network read and local console output), Sanitization (HTML tag removal via _strip_tags function).
Audit Metadata