s2b-notice-search
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx -y @nomadamas/k-skill@0to fetch instructions and perform updates. This downloads and executes content from the npm registry belonging to the skill's author ('nomadamas'), which is a standard vendor-provided mechanism for maintaining up-to-date instructions. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to parse and extract metadata from HTML content on the external S2B procurement website (
www.s2b.kr). This data ingestion represents an attack surface for indirect prompt injection. However, the risk is mitigated as the skill is strictly read-only and lacks high-privilege capabilities such as arbitrary command execution or persistence. The ingestion points are notice list and detail HTML pages from the S2B domain, and capabilities are limited to metadata extraction and browser-based search facilitation.
Audit Metadata