nts-business-registration
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a legitimate interface for interacting with the Korean National Tax Service (NTS) through a proxy ("https://k-skill-proxy.nomadamas.org") and official data portals ("data.go.kr", "api.odcloud.kr"). This connectivity is essential for the skill's operation and matches its stated purpose.
- [COMMAND_EXECUTION]: A Python script ("scripts/nts_business_registration.py") is used to handle API requests. The script implements strict validation for business numbers (10 digits), registration dates (YYYYMMDD), and text field lengths to ensure data integrity and prevent injection.
- [DATA_EXFILTRATION]: While the skill transmits business-related data (registration numbers, names) to external endpoints, this behavior is clearly documented as a functional requirement. The skill author provides guidance on privacy boundaries and supports self-hosted proxy configurations for sensitive environments.
- [SAFE]: No obfuscation, persistence mechanisms, hardcoded credentials, or unauthorized privilege escalations were found in the skill's instructions or helper script.
Audit Metadata