The Agent Skills Directory

[SAFE]: The skill implements a secure architecture where sensitive API keys for the South Korean government data portal (data.go.kr) are managed exclusively on a proxy server (k-skill-proxy.nomadamas.org).
[EXTERNAL_DOWNLOADS]: The skill uses npx to fetch instructional content from the vendor's own repository (@nomadamas/k-skill). This is documented as a standard way to receive up-to-date instructions and does not involve unauthorized code execution.
[COMMAND_EXECUTION]: The skill provides example curl commands for querying the WHOIS proxy. These commands are limited to GET requests for public registration data and do not perform any privileged system operations or state-changing actions.
[DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration was found. The network requests target the designated vendor proxy for the specific purpose of WHOIS lookups. The instructions explicitly warn against mass collection of personal information and automated security attacks.
[CREDENTIALS_UNSAFE]: The skill correctly instructs users NOT to provide or store plaintext credentials and confirms that the required DATA_GO_KR_API_KEY is only stored in the proxy environment, not in the skill instructions or client-side vault.

kr-whois-lookup