sh-notice-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill searches and reads public notice boards and notice details from Seoul Housing and Communities Corporation (SH) via www.i-sh.co.kr, where board content can be influenced by public postings (low-risk active search/fetch of external public web content).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs execution of npx -y @nomadamas/k-skill@0, which fetches and runs external code from npm (an unofficial public registry transport for package @nomadamas/k-skill), constituting a common/reputable unofficial operational dependency.