korean-holiday-calendar
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch instruction stubs from the official vendor package@nomadamas/k-skill. As this belongs to the skill's verified author (NomaDamas) and is used for documentation purposes, it is considered safe practice. - [COMMAND_EXECUTION]: The skill uses
curlto interact with a proxy API (k-skill-proxy.nomadamas.org). The commands are restricted to GET requests for holiday data and do not involve sensitive local file access or administrative privileges. - [CREDENTIALS_UNSAFE]: The skill explicitly instructs users NOT to store API keys locally. It uses a proxy architecture where the
DATA_GO_KR_API_KEYis managed solely on the server side, which is a recommended security pattern for protecting service credentials. - [DATA_EXFILTRATION]: Network operations are limited to the vendor's designated proxy and the official South Korean public data portal. No sensitive user data or system configurations are accessed or transmitted.
Audit Metadata