korean-character-count

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's instructions in SKILL.md and instruction.md direct the agent to use npx to fetch the @nomadamas/k-skill package from the npm registry. This is used to retrieve instructions and execute the counting logic.
  • [REMOTE_CODE_EXECUTION]: The workflow leverages npx -y @nomadamas/k-skill@0 to execute remote code from the npm registry. This is utilized to run the local scripts/korean_character_count.js file within the vendor's CLI environment.
  • [COMMAND_EXECUTION]: The skill requires the execution of shell commands (e.g., npx, cat) to process text inputs and generate character count reports. This is a core component of the skill's operational design.
  • [DATA_EXFILTRATION]: The helper script scripts/korean_character_count.js includes the capability to read local files via fs.readFileSync when the --file flag is used. While this provides the agent with the ability to access filesystem data, the script is designed to output character counts and metadata rather than the raw file contents, and this access is part of the skill's primary purpose for counting text in documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 04:29 AM
Security Audit — agent-trust-hub — korean-character-count