The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes npx to fetch and execute the @nomadamas/k-skill package from the NPM registry. This package is maintained by the skill author and is used to retrieve up-to-date instructions and execute bundled helper scripts.
[REMOTE_CODE_EXECUTION]: The use of npx to download and run a CLI tool constitutes remote code execution. This is a deliberate part of the vendor's workflow for managing skill assets and runtime instructions.
[COMMAND_EXECUTION]: The skill executes shell commands using subprocess.run in Python to invoke the curl utility for querying external address services.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and parses HTML content from the external official domain www.epost.kr to extract address information.
Ingestion points: scripts/zipcode_search.py and instruction.md fetch HTML data via curl GET requests.
Boundary markers: None present. The content is parsed using regular expressions to extract specific JavaScript function arguments (viewDetail).
Capability inventory: Shell command execution via subprocess.run (to run curl).
Sanitization: The script applies html.unescape() to extracted strings to handle HTML entities.

zipcode-search