Skills
Navigate
skills/nomadamas/k-skill/intercity-bus-booking/Gen Agent Trust Hub

intercity-bus-booking

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and run the @nomadamas/k-skill package from the npm registry.
  • [REMOTE_CODE_EXECUTION]: Remote code from the @nomadamas/k-skill package is executed via npx to provide CLI functionality and updated instructions.
  • [COMMAND_EXECUTION]: The skill requires shell access to execute python scripts and the npx utility for its core functions.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with external web content, presenting a surface for indirect prompt injection.
  • Ingestion points: The scripts/intercity_bus_search.py script retrieves HTML from https://intercitybus.tmoney.co.kr.
  • Boundary markers: Absent.
  • Capability inventory: Includes network requests and local file system writes.
  • Sanitization: None performed on the scraped HTML data.
  • [SAFE]: The Python helper script uses ssl._create_unverified_context() to maintain connectivity with the Tmoney booking service, which is documented as a necessary implementation choice.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:50 AM