national-pension-workplace

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @nomadamas/k-skill package from the NPM registry. This package is the official CLI framework provided by the skill's author for instruction delivery and execution.
  • [COMMAND_EXECUTION]: Instructions provide shell commands to fetch the latest documentation and run the included Python helper script. These commands are standard for the skill's intended operation as a developer tool.
  • [DATA_EXFILTRATION]: The helper script scripts/national_pension_workplace.py communicates with k-skill-proxy.nomadamas.org. This is a vendor-owned domain used to proxy requests to the Korean Public Data Portal. No sensitive user credentials or local files are transmitted to this service.
  • [SAFE]: The skill includes explicit 'Hard rules' that instruct the agent to never execute payments, bypass safety filters, or store plaintext credentials, demonstrating a security-conscious design.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 07:36 AM
Security Audit — agent-trust-hub — national-pension-workplace