mofa-travel-safety
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to fetch instructions and files using
npx -y @nomadamas/k-skill@0, which is a standard procedure for this vendor's tools. It also references official documentation on GitHub and the South Korean government's open data portal (data.go.kr). - [COMMAND_EXECUTION]: The skill utilizes
curlin the documentation and provides a Python script (scripts/run_mofa_travel_safety.py) to query travel alerts. These operations are limited to GET requests against a specific API proxy (k-skill-proxy.nomadamas.org) and do not involve shell injection or sensitive file access. - [SAFE]: All external resources, including the proxy URL and the NPM package, belong to the skill's author (
nomadamas). The hard rules explicitly prohibit unauthorized actions like payments or credential exposure, following security best practices.
Audit Metadata