📦

estat-stats

Name: estat-stats
Author: tahodev

Revisión del contenido r1 Riesgo bajo ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos

Find and Retrieve Japanese Government Statistics

Japanese statistical tables use table identifiers and dimension codes that can be difficult to navigate. This skill guides table search, metadata inspection, and filtered retrieval through the official e-Stat API.

Compatible con: Claude Codex Code(CC)

📊 74 Adecuado

Maintain this Skill? Claim it 📊 74 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "estat-stats" from https://skillstore.io/skills/tahodev-estat-stats.md and its manifest at https://skillstore.io/api/skills/tahodev-estat-stats/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/tahodev-estat-stats.md Manifest firmado GET /api/skills/tahodev-estat-stats/manifest Lockfile firmado GET /api/skills/tahodev-estat-stats/lockfile

Pruébalo

Usando "estat-stats". Explain the metadata needed to retrieve total population from the documented example table.

Resultado esperado:

The skill uses table 0000150002 as its population-estimates example.
Its documented filters select total age and total sex using code 000 for both dimensions.
Confirm those codes with current metadata and map returned time and area codes to their labels.
Actual values require a live request with a valid appId.

Usando "estat-stats". The request returned HTTP 200, but the application status is 100. Did retrieval succeed?

Resultado esperado:

No. The documented status 100 indicates authentication failure even when HTTP status is 200.
Check that ESTAT_APP_ID is configured without printing its value.
Verify the appId in your e-Stat account before requesting data again.

Auditoría de seguridad

Riesgo bajo

v1 • 13/10/2026 Abrir el informe versionado

All 30 static findings are false positives involving Markdown formatting, official e-Stat URLs, a documentation link, and readable Japanese text. No evidence found of prompt injection, malicious execution, or unauthorized data exfiltration. One separate concern remains: expanded API keys enter curl process arguments and may be visible to local process inspection or monitoring.

Archivos escaneados

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Bajo

SKILL.md:25 SKILL.md:39 SKILL.md:48

API Key Exposure Through Process Arguments

Each curl example expands ESTAT_APP_ID into a URL passed as a process argument. Local process inspection or monitoring may expose the credential.

Shell expansion places the environment variable value directly in curl arguments. Exposure depends on local process visibility and monitoring; no malicious intent is evident.

Factores de riesgo

⚙️ Comandos externos (21)

🌐 Acceso a red (6)

SKILL.md:18 SKILL.md:20 SKILL.md:25 SKILL.md:39 SKILL.md:48 SKILL.md:63

📁 Acceso al sistema de archivos (1)

SKILL.md:57

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/tahodev-estat-stats/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-estat-stats/security.svg)](https://skillstore.io/skills/tahodev-estat-stats?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/tahodev-estat-stats?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-estat-stats/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/tahodev-estat-stats.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

tahodev. (2026). estat-stats security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-estat-stats/audits/1

Cita BibTeX

@techreport{tahodev-tahodev-estat-stats-2026,
  author = {tahodev},
  title = {estat-stats security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/tahodev-estat-stats/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "estat-stats security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-estat-stats/audits/1"
identifiers:
  - type: other
    value: "skillstore:tahodev-estat-stats:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Locate Population Tables

Find relevant population tables and inspect their dimensions before retrieving research data.

Check Official Economic Sources

Search for GDP or CPI tables and identify official sources for a report.

Retrieve Filtered Statistical Values

Use metadata-derived codes and pagination to collect public statistics for a data workflow.

Prueba estos prompts

Find a Statistical Table

Find up to five e-Stat population tables. Show their IDs, titles, and responsible agencies. Use my configured appId without displaying it.

Inspect Table Dimensions

Inspect metadata for e-Stat table [table ID]. Explain its dimensions and available region, time, and category codes before requesting values.

Retrieve Filtered Values

Retrieve [measure] from table [table ID] for [region] and [period]. Verify filter codes using metadata. Report labels, units, and source attribution.

Retrieve Multiple Pages Reliably

Retrieve all matching values from [table ID] using [filters]. Paginate with response counters, pace requests, check application status, and report incomplete retrieval.

Mejores prácticas

Keep the appId out of chat, commits, process arguments, and logs; use a credential-safe request method.
Inspect metadata before choosing filters, map codes to labels, and include official source attribution.
Check application status, apply timeouts, pace paginated requests, reuse results, and limit retries.

Evitar

Assuming HTTP 200 means the statistical request succeeded.
Reusing classification codes across tables without checking metadata.
Treating one limited response page as a complete dataset.

Preguntas frecuentes

Do I need an API key?

Yes. Obtain an appId through e-Stat registration and configure it outside chat or committed files.

Which statistics can I search?

The skill targets e-Stat tables, including population, GDP, CPI, labor, and regional statistics. Availability depends on the service.

Does this package include an executable client?

No. It provides API instructions and curl examples. Live requests require suitable tools and network access.

Why inspect metadata before retrieving values?

Metadata defines each table's dimensions and classification codes. It helps select valid filters and interpret returned values.

Can HTTP 200 still indicate failure?

Yes. Check the response application status. The skill documents status 100 for authentication failure and status 0 for success.

Do retrieved statistics need attribution?

The skill states that outputs using retrieved data need source credit. Review the linked e-Stat attribution requirements.

Detalles del desarrollador

Autor

tahodev

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/tahodev/kurashi-skill/tree/09cb7f9eac85f0c85633cce08328a1a57854a94f/estat-stats

Ref.

7f17813fb6af1acc7d8fd3fb5f05480f5be52783

Actualidad del mantenimiento

13/10/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md