The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions suggest running npx -y @nomadamas/k-skill@0 instruct kakao-map to fetch the latest execution guidelines. This targets the author's own verified package on the NPM registry.
[COMMAND_EXECUTION]: Uses standard shell commands (npx, curl) for fetching documentation and querying the API proxy. No arbitrary or high-privilege command execution was detected.
[CREDENTIALS_UNSAFE]: The skill correctly implements security best practices by offloading API key management to a proxy server (k-skill-proxy.nomadamas.org). It explicitly instructs the agent never to ask for or store plaintext credentials.
[DATA_EXFILTRATION]: All network traffic is directed to the developer's proxy or standard documentation sites. No patterns were found indicating the exfiltration of sensitive local data (e.g., .ssh, .env) to unauthorized external domains.

kakao-map