han-river-water-level
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the vendor-owned package@nomadamas/k-skillfor instruction retrieval and utility updates. This is an expected management pattern for the nomadamas ecosystem. - [COMMAND_EXECUTION]: The skill instructions involve executing
curlcommands to query the vendor-owned proxy server atk-skill-proxy.nomadamas.org. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied station names and codes to construct data queries. [1] Ingestion points:
stationNameandstationCodeinputs defined ininstruction.md. [2] Boundary markers: Example commands use thecurl--data-urlencodeflag to separate parameters from the command structure. [3] Capability inventory: The skill is limited to shell execution of network requests viacurl. [4] Sanitization: User input is URL-encoded by thecurltool before being sent to the endpoint, preventing simple command injection or parameter manipulation.
Audit Metadata