kosis-stats
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and run the@nomadamas/k-skillpackage from the NPM registry to interact with its infrastructure. - [EXTERNAL_DOWNLOADS]: API requests are routed through a vendor-controlled proxy server at
https://k-skill-proxy.nomadamas.orgto manage authentication server-side by default. - [REMOTE_CODE_EXECUTION]: The agent is instructed to execute remote code via
npxto obtain the primary instruction set and run helper utilities. - [COMMAND_EXECUTION]: The skill executes a bundled Python script,
scripts/run_kosis_stats.py, which is responsible for the statistical data lookup logic. - [SAFE]: The script implements secure credential management by reading the KOSIS API key from environment variables or a local configuration file (
~/.config/k-skill/secrets.env) and includes a dry-run mode that redacts sensitive information.
Audit Metadata