korean-marathon-schedule
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to run
npx -y @nomadamas/k-skill@0, which downloads and executes a package from the npm registry. This package is owned by the skill's author, 'nomadamas', and follows standard development patterns for this vendor. - [COMMAND_EXECUTION]: The skill uses shell commands (
npx,node) to fetch instructions and execute the search logic contained in thekorean-marathon-schedulelocal package. These operations are scoped to public data retrieval. - [DATA_EXFILTRATION]: The skill accesses external domains
gorunning.krandtriathlon.or.kr. These are the primary data sources for the skill's stated purpose. There is no evidence of sensitive local data being sent to these domains. - [SAFE]: The skill includes strong 'Hard Rules' that explicitly prevent the agent from executing payments, sharing credentials, or bypassing CAPTCHAs/legal boundaries, which mitigates common risks associated with booking-type skills.
Audit Metadata