📦

estat-stats

Name: estat-stats
Author: tahodev

コンテンツリビジョン r1 低リスク ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス

Find and Retrieve Japanese Government Statistics

Japanese statistical tables use table identifiers and dimension codes that can be difficult to navigate. This skill guides table search, metadata inspection, and filtered retrieval through the official e-Stat API.

対応: Claude Codex Code(CC)

📊 74 十分

Maintain this Skill? Claim it 📊 74 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "estat-stats" from https://skillstore.io/skills/tahodev-estat-stats.md and its manifest at https://skillstore.io/api/skills/tahodev-estat-stats/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/tahodev-estat-stats.md 署名済み manifest GET /api/skills/tahodev-estat-stats/manifest 署名済み lockfile GET /api/skills/tahodev-estat-stats/lockfile

テストする

「estat-stats」を使用しています。 Explain the metadata needed to retrieve total population from the documented example table.

期待される結果:

The skill uses table 0000150002 as its population-estimates example.
Its documented filters select total age and total sex using code 000 for both dimensions.
Confirm those codes with current metadata and map returned time and area codes to their labels.
Actual values require a live request with a valid appId.

「estat-stats」を使用しています。 The request returned HTTP 200, but the application status is 100. Did retrieval succeed?

期待される結果:

No. The documented status 100 indicates authentication failure even when HTTP status is 200.
Check that ESTAT_APP_ID is configured without printing its value.
Verify the appId in your e-Stat account before requesting data again.

セキュリティ監査

低リスク

v1 • 2026/10/13 バージョン別レポートを開く

All 30 static findings are false positives involving Markdown formatting, official e-Stat URLs, a documentation link, and readable Japanese text. No evidence found of prompt injection, malicious execution, or unauthorized data exfiltration. One separate concern remains: expanded API keys enter curl process arguments and may be visible to local process inspection or monitoring.

スキャンされたファイル

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (1)

低

SKILL.md:25 SKILL.md:39 SKILL.md:48

API Key Exposure Through Process Arguments

Each curl example expands ESTAT_APP_ID into a URL passed as a process argument. Local process inspection or monitoring may expose the credential.

Shell expansion places the environment variable value directly in curl arguments. Exposure depends on local process visibility and monitoring; no malicious intent is evident.

リスク要因

⚙️ 外部コマンド (21)

🌐 ネットワークアクセス (6)

SKILL.md:18 SKILL.md:20 SKILL.md:25 SKILL.md:39 SKILL.md:48 SKILL.md:63

📁 ファイルシステムへのアクセス (1)

SKILL.md:57

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/tahodev-estat-stats/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-estat-stats/security.svg)](https://skillstore.io/skills/tahodev-estat-stats?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/tahodev-estat-stats?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-estat-stats/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/tahodev-estat-stats.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

tahodev. (2026). estat-stats security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-estat-stats/audits/1

BibTeX形式の引用

@techreport{tahodev-tahodev-estat-stats-2026,
  author = {tahodev},
  title = {estat-stats security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/tahodev-estat-stats/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "estat-stats security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-estat-stats/audits/1"
identifiers:
  - type: other
    value: "skillstore:tahodev-estat-stats:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Locate Population Tables

Find relevant population tables and inspect their dimensions before retrieving research data.

Check Official Economic Sources

Search for GDP or CPI tables and identify official sources for a report.

Retrieve Filtered Statistical Values

Use metadata-derived codes and pagination to collect public statistics for a data workflow.

これらのプロンプトを試す

Find a Statistical Table

Find up to five e-Stat population tables. Show their IDs, titles, and responsible agencies. Use my configured appId without displaying it.

Inspect Table Dimensions

Inspect metadata for e-Stat table [table ID]. Explain its dimensions and available region, time, and category codes before requesting values.

Retrieve Filtered Values

Retrieve [measure] from table [table ID] for [region] and [period]. Verify filter codes using metadata. Report labels, units, and source attribution.

Retrieve Multiple Pages Reliably

Retrieve all matching values from [table ID] using [filters]. Paginate with response counters, pace requests, check application status, and report incomplete retrieval.

ベストプラクティス

Keep the appId out of chat, commits, process arguments, and logs; use a credential-safe request method.
Inspect metadata before choosing filters, map codes to labels, and include official source attribution.
Check application status, apply timeouts, pace paginated requests, reuse results, and limit retries.

回避

Assuming HTTP 200 means the statistical request succeeded.
Reusing classification codes across tables without checking metadata.
Treating one limited response page as a complete dataset.

よくある質問

Do I need an API key?

Yes. Obtain an appId through e-Stat registration and configure it outside chat or committed files.

Which statistics can I search?

The skill targets e-Stat tables, including population, GDP, CPI, labor, and regional statistics. Availability depends on the service.

Does this package include an executable client?

No. It provides API instructions and curl examples. Live requests require suitable tools and network access.

Why inspect metadata before retrieving values?

Metadata defines each table's dimensions and classification codes. It helps select valid filters and interpret returned values.

Can HTTP 200 still indicate failure?

Yes. Check the response application status. The skill documents status 100 for authentication failure and status 0 for success.

Do retrieved statistics need attribution?

The skill states that outputs using retrieved data need source credit. Review the linked e-Stat attribution requirements.

開発者情報

作成者

tahodev

ライセンス

MIT

Skillstore リビジョン

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/tahodev/kurashi-skill/tree/09cb7f9eac85f0c85633cce08328a1a57854a94f/estat-stats

参照

7f17813fb6af1acc7d8fd3fb5f05480f5be52783

メンテナンスの新しさ

2026/10/13

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

📄 SKILL.md