seoul-density
Fail
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions in SKILL.md direct the agent to use npx to download the @nomadamas/k-skill package from the public registry.
- [REMOTE_CODE_EXECUTION]: The package downloaded via npx is executed immediately to provide instructions and updates for the skill.
- [COMMAND_EXECUTION]: The skill uses shell commands (npx, python) to perform its core operations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a remote proxy (https://k-skill-proxy.nomadamas.org). 1. Ingestion point: scripts/seoul_density.py. 2. Boundary markers: Absent. 3. Capability inventory: The agent has shell access via the skill. 4. Sanitization: Absent.
Recommendations
- AI detected serious security threats
Audit Metadata