corporate-registration-consulting
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@nomadamas/k-skillandk-skill-rhwppackages from npm. These resources belong to the same vendor as the skill author. - [EXTERNAL_DOWNLOADS]: HWP templates are referenced via a manifest pointing to
blog.kakaocdn.net(Kakao/Tistory CDN), which is a well-known hosting service. - [COMMAND_EXECUTION]: The Python script
scripts/fill_official_hwp.pyexecutes shell commands viasubprocess.runto invoke thek-skill-rhwputility. The implementation uses argument lists rather than shell interpolation, which is a secure practice. - [INDIRECT_PROMPT_INJECTION]: The skill collects user inputs (company name, address, etc.) and populates them into HWP documents. While this represents a data ingestion surface, the risk is minimized by using a specialized tool (
k-skill-rhwp) to target specific cells within a binary document format.
Audit Metadata