g2b-order-plan-search
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with a proxy server (
k-skill-proxy.nomadamas.org) to fetch public data from the South Korean Open Data Portal (data.go.kr). This follows standard practice for accessing government APIs while keeping API keys server-side. - [COMMAND_EXECUTION]: The script uses standard
argparseandurllibto handle command-line inputs and network requests. No arbitrary command execution or shell injection risks were identified. - [CREDENTIALS_UNSAFE]: No hardcoded secrets were found. The skill explicitly states that the required API key (
DATA_GO_KR_API_KEY) is managed on the proxy server, and it correctly advises users to use environment variables for the proxy URL if self-hosting. - [DATA_EXFILTRATION]: The network operations are limited to fetching procurement plan data from the defined proxy endpoint. No sensitive local file access or exfiltration patterns were detected.
Audit Metadata