ev-charger-nearby
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include
npxcommands for the vendor's@nomadamas/k-skillpackage to manage stubs and instructions. This is a standard mechanism for skill maintenance. - [EXTERNAL_DOWNLOADS]: The skill connects to official government endpoints (apis.data.go.kr) and a vendor-operated proxy (nomadamas.org) to fulfill its purpose of providing EV charger information.
- [DYNAMIC_EXECUTION]: The test suite (
tests/test_ev_charger.py) uses dynamic imports (importlib,__import__) to load the skill's Python code for validation. This is a standard development practice and does not affect production safety. - [SAFE]: The script accesses API keys from
~/.config/k-skill/secrets.envor environment variables, adhering to documented and secure secret management protocols.
Audit Metadata