📦

estat-stats

Name: estat-stats
Author: tahodev

Ревизия содержимого r1 Низкий риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе

Find and Retrieve Japanese Government Statistics

Japanese statistical tables use table identifiers and dimension codes that can be difficult to navigate. This skill guides table search, metadata inspection, and filtered retrieval through the official e-Stat API.

Поддерживает: Claude Codex Code(CC)

📊 74 Адекватно

Maintain this Skill? Claim it 📊 74 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "estat-stats" from https://skillstore.io/skills/tahodev-estat-stats.md and its manifest at https://skillstore.io/api/skills/tahodev-estat-stats/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/tahodev-estat-stats.md Подписанный manifest GET /api/skills/tahodev-estat-stats/manifest Подписанный lockfile GET /api/skills/tahodev-estat-stats/lockfile

Протестировать

Использование «estat-stats». Explain the metadata needed to retrieve total population from the documented example table.

Ожидаемый результат:

The skill uses table 0000150002 as its population-estimates example.
Its documented filters select total age and total sex using code 000 for both dimensions.
Confirm those codes with current metadata and map returned time and area codes to their labels.
Actual values require a live request with a valid appId.

Использование «estat-stats». The request returned HTTP 200, but the application status is 100. Did retrieval succeed?

Ожидаемый результат:

No. The documented status 100 indicates authentication failure even when HTTP status is 200.
Check that ESTAT_APP_ID is configured without printing its value.
Verify the appId in your e-Stat account before requesting data again.

Аудит безопасности

Низкий риск

v1 • 13.10.2026 Открыть версионный отчет

All 30 static findings are false positives involving Markdown formatting, official e-Stat URLs, a documentation link, and readable Japanese text. No evidence found of prompt injection, malicious execution, or unauthorized data exfiltration. One separate concern remains: expanded API keys enter curl process arguments and may be visible to local process inspection or monitoring.

Просканировано файлов

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Низкий

SKILL.md:25 SKILL.md:39 SKILL.md:48

API Key Exposure Through Process Arguments

Each curl example expands ESTAT_APP_ID into a URL passed as a process argument. Local process inspection or monitoring may expose the credential.

Shell expansion places the environment variable value directly in curl arguments. Exposure depends on local process visibility and monitoring; no malicious intent is evident.

Факторы риска

⚙️ Внешние команды (21)

🌐 Доступ к сети (6)

SKILL.md:18 SKILL.md:20 SKILL.md:25 SKILL.md:39 SKILL.md:48 SKILL.md:63

📁 Доступ к файловой системе (1)

SKILL.md:57

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/tahodev-estat-stats/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-estat-stats/security.svg)](https://skillstore.io/skills/tahodev-estat-stats?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/tahodev-estat-stats?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-estat-stats/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/tahodev-estat-stats.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

tahodev. (2026). estat-stats security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-estat-stats/audits/1

Цитата BibTeX

@techreport{tahodev-tahodev-estat-stats-2026,
  author = {tahodev},
  title = {estat-stats security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/tahodev-estat-stats/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "estat-stats security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-estat-stats/audits/1"
identifiers:
  - type: other
    value: "skillstore:tahodev-estat-stats:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Locate Population Tables

Find relevant population tables and inspect their dimensions before retrieving research data.

Check Official Economic Sources

Search for GDP or CPI tables and identify official sources for a report.

Retrieve Filtered Statistical Values

Use metadata-derived codes and pagination to collect public statistics for a data workflow.

Попробуйте эти промпты

Find a Statistical Table

Find up to five e-Stat population tables. Show their IDs, titles, and responsible agencies. Use my configured appId without displaying it.

Inspect Table Dimensions

Inspect metadata for e-Stat table [table ID]. Explain its dimensions and available region, time, and category codes before requesting values.

Retrieve Filtered Values

Retrieve [measure] from table [table ID] for [region] and [period]. Verify filter codes using metadata. Report labels, units, and source attribution.

Retrieve Multiple Pages Reliably

Retrieve all matching values from [table ID] using [filters]. Paginate with response counters, pace requests, check application status, and report incomplete retrieval.

Лучшие практики

Keep the appId out of chat, commits, process arguments, and logs; use a credential-safe request method.
Inspect metadata before choosing filters, map codes to labels, and include official source attribution.
Check application status, apply timeouts, pace paginated requests, reuse results, and limit retries.

Избегать

Assuming HTTP 200 means the statistical request succeeded.
Reusing classification codes across tables without checking metadata.
Treating one limited response page as a complete dataset.

Часто задаваемые вопросы

Do I need an API key?

Yes. Obtain an appId through e-Stat registration and configure it outside chat or committed files.

Which statistics can I search?

The skill targets e-Stat tables, including population, GDP, CPI, labor, and regional statistics. Availability depends on the service.

Does this package include an executable client?

No. It provides API instructions and curl examples. Live requests require suitable tools and network access.

Why inspect metadata before retrieving values?

Metadata defines each table's dimensions and classification codes. It helps select valid filters and interpret returned values.

Can HTTP 200 still indicate failure?

Yes. Check the response application status. The skill documents status 100 for authentication failure and status 0 for success.

Do retrieved statistics need attribution?

The skill states that outputs using retrieved data need source credit. Review the linked e-Stat attribution requirements.

Сведения для разработчиков

Автор

tahodev

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/tahodev/kurashi-skill/tree/09cb7f9eac85f0c85633cce08328a1a57854a94f/estat-stats

Ссылка

7f17813fb6af1acc7d8fd3fb5f05480f5be52783

Актуальность поддержки

13.10.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md