Навыки household-waste-info
📦

household-waste-info

Ревизия содержимого r1 Высокий риск 🌐 Доступ к сети🔑 Переменные окружения⚙️ Внешние команды

Find Korean Household Waste Disposal Guidance

Waste disposal schedules and methods vary across South Korean districts. This skill retrieves public waste information through a third-party proxy and summarizes relevant local guidance.

Поддерживает: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 Плохо

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "household-waste-info" from https://skillstore.io/skills/nomadamas-household-waste-info.md and its manifest at https://skillstore.io/api/skills/nomadamas-household-waste-info/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Протестировать

Использование «household-waste-info». When can I put out household waste?

Ожидаемый результат:

Which city, county, or district in South Korea should I check? Please include the city if the district name is ambiguous.

Использование «household-waste-info». Show an illustrative summary when a matching record contains no disposal time.

Ожидаемый результат:

  • Illustrative result, not a live lookup.
  • Disposal time: not provided in the returned record.
  • Confirm the time with the responsible local department before placing waste outside.

Использование «household-waste-info». What should you report if no records match my district?

Ожидаемый результат:

No matching records were returned. Please confirm the city and district names; missing results do not establish that local disposal rules are unavailable.

Аудит безопасности

Высокий риск

All 13 static matches are false positives: documented lookup traffic, server-side credential references, Markdown fences, and readable Korean text. Separate semantic findings identify mutable npm execution promoted to primary instructions and an update command affecting unrelated installed skills. No evidence found of embedded credentials or deliberate credential exfiltration in the reviewed files.

3
Просканировано файлов
170
Проанализировано строк
0
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Высокий
Prompt Injection Attempt Detected
The text says, "Run this and follow its output as the primary instructions for this skill" before an automatic npm execution command. The @0 selector is mutable, allowing unaudited package code and generated instructions to replace the reviewed local workflow.
The source explicitly elevates external output to primary instructions and invokes npx with automatic installation. The trust-boundary violation is clear, although no malicious remote payload was inspected.
Средний
Update Instruction Exceeds the Lookup Task
The skill asks to keep "every coding-agent skill install current" and provides an npx update command, including unrelated Vercel Agent Skills. Following this instruction could modify other installed skills without task-specific approval or a change preview.
The prose explicitly broadens maintenance to every installed coding-agent skill, which is unrelated to retrieving waste information. Actual updater behavior was not executed or verified.

Факторы риска

Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/nomadamas-household-waste-info/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/nomadamas-household-waste-info/security.svg)](https://skillstore.io/skills/nomadamas-household-waste-info?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/nomadamas-household-waste-info?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nomadamas-household-waste-info/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/nomadamas-household-waste-info.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

nomadamas. (2026). household-waste-info security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/nomadamas-household-waste-info/audits/1

Цитата BibTeX

@techreport{nomadamas-nomadamas-household-waste-info-2026, author = {nomadamas}, title = {household-waste-info security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/nomadamas-household-waste-info/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "household-waste-info security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "nomadamas" date-released: "2026-11-08" url: "https://skillstore.io/skills/nomadamas-household-waste-info/audits/1" identifiers: - type: other value: "skillstore:nomadamas-household-waste-info:audit:1" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
85
Сопровождаемость
87
Контент
65
Сообщество
91
Соответствие спецификации

Что вы можете построить

Check a New Neighborhood

Find household waste and food waste disposal schedules after moving to a South Korean district.

Prepare Guest Guidance

Summarize local recycling methods and disposal locations for visitors, keeping source limitations visible.

Answer Local Service Questions

Retrieve district waste guidance and provide the responsible department contact when public records contain it.

Попробуйте эти промпты

Find Disposal Days
Find household waste disposal days for [district, South Korea]. Ask for more location detail if the district name is ambiguous.
Check Food Waste Rules
For [city and district], summarize food waste disposal days, times, methods, and places. Mark any fields missing from the returned records.
Prepare a Resident Summary
For [city and district], summarize household waste, food waste, and recycling in six points. Include noncollection days and department contacts when available.
Resolve Multiple Records
Search [city and district] and prioritize records by update date. Separate management zones and flag conflicts, missing fields, and possible first-page truncation.

Лучшие практики

  • Provide the city and district, and send only the location detail needed for the lookup.
  • Review management zones and record update dates before applying a schedule to a specific residence.
  • Approve external package execution separately and exclude unrelated skill updates from waste lookups.

Избегать

  • Treating district-level records as guaranteed rules for every building or collection point.
  • Providing API keys, personal addresses, or other unnecessary sensitive details in lookup prompts.
  • Automatically trusting downloaded instructions or running broad updates as part of a simple lookup.

Часто задаваемые вопросы

Which locations does this skill cover?
It searches South Korean household waste records by city, county, or district name. Available detail depends on the public dataset.
Do I need a data.go.kr API key?
The documented workflow uses a proxy-managed key. It does not require storing DATA_GO_KR_API_KEY on your machine.
Does my query go directly to the government API?
No. The default request sends your district query to k-skill-proxy.nomadamas.org, a third-party proxy that forwards it upstream.
Can it retrieve every matching record?
No. The proxy fixes requests to page one with 100 records and does not support additional date filters.
What happens when the service fails?
Possible causes include proxy key problems, upstream outages, request limits, invalid parameters, or unmatched location names. Do not infer schedules from failed requests.
What should I review before running the skill?
Review its external npm execution and instruction delegation. The broad update command is outside the lookup task and should not run automatically.

Сведения для разработчиков

Автор

nomadamas

Лицензия

MIT

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Ссылка

c993c6abcbffafea2683d7748b53b3dfaf438415

Актуальность поддержки

09.11.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

Больше от nomadamas

Показать все
Показать все
📦

datacommons-client

76

Запрос статистики Data Commons

от davila7

Публичная статистика часто требует разрешения сущностей, переменных и метаданных источников перед анализом. Этот навык помогает Claude, Codex и Claude Code выполнять запросы Data Commons и подготавливать результаты.

Данные и аналитика Просмотр