korean-patent-search
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch the@nomadamas/k-skillCLI tool from the npm registry. This tool is used to manage instructions, update the skill, and execute the helper scripts (found inSKILL.mdandinstruction.md). As this is a resource owned by the vendor 'nomadamas', it represents normal functional behavior. - [COMMAND_EXECUTION]: The skill instructions involve executing shell commands to run the Python helper script (
scripts/patent_search.py) and interact with the vendor's CLI. These commands are necessary for the skill's primary purpose of patent searching. - [CREDENTIALS_SAFE]: The skill manages the KIPRIS Plus API key through a standard environment variable (
KIPRIS_PLUS_API_KEY) or a command-line argument (--service-key), which is consistent with secure credential management practices for API integrations. - [REMOTE_CODE_EXECUTION]: The execution of code via
npxtargets the vendor's own package repository for skill lifecycle management and execution. This is a documented part of the vendor's skill ecosystem.
Audit Metadata