The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch updated instructions and helper files using npx -y @nomadamas/k-skill@0. The @nomadamas scope matches the verified author of the skill ('NomaDamas'), representing legitimate vendor tooling. Findings are safe as they originate from the author's official infrastructure.
[COMMAND_EXECUTION]: The skill uses curl to fetch data from k-skill-proxy.nomadamas.org. This is a vendor-owned domain used for its intended purpose of providing a controlled interface to the National Assembly Open API. No dangerous command patterns or unauthorized file system access were detected.
[CREDENTIALS_UNSAFE]: The skill explicitly advises against storing API keys in the code or environment variables. It specifies that the ASSEMBLY_API_KEY should only be stored on the proxy server, which is a security best practice for managing secrets in AI agent skills.
[DATA_EXFILTRATION]: Network operations are restricted to retrieving legislative data from the official National Assembly API via the author's proxy. No sensitive local data is accessed or transmitted to third parties.

assembly-bill-vote-search