sh-notice-search
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch instructions and helper files from the author's official package@nomadamas/k-skill. These are standard operational procedures for this vendor's skill ecosystem. - [COMMAND_EXECUTION]: The instructions include several shell commands (
node packages/sh-notice-search/src/cli.js) used to interact with the local SH notice search package. These commands are scoped to the skill's primary purpose of parsing public website data. - [DATA_EXPOSURE]: The skill explicitly states it does not access or store plaintext credentials, nor does it perform automated logins or submissions. It strictly fetches public HTML content from
www.i-sh.co.kr. - [SAFE]: The network operations target a well-known public service (Seoul Housing & Communities Corporation) to retrieve housing announcements. This is a legitimate, read-only use case with no exfiltration of sensitive user data.
Audit Metadata