ktx-booking

SUSPICIOUS. The skill’s capabilities mostly match its stated KTX/Korail booking purpose, and data flow appears directed toward the intended service rather than an obvious third-party exfiltration endpoint. However, it relies on unpinned third-party PyPI packages—especially a forked Korail client with limited trust evidence—and uses a plaintext local credential-file fallback, making the overall footprint moderately risky but not fundamentally incompatible with the stated purpose.