Skills taiwan-museum

📦

taiwan-museum

Name: taiwan-museum
Author: tahodev

Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access

Find Taiwan Museums and Visitor Details

Museum addresses, ticket conditions, and contact details can be difficult to compare across separate websites. This skill guides directory searches using public Ministry of Culture data.

Supports: Claude Codex Code(CC)

🥉 77 Bronze

Maintain this Skill? Claim it 🥉 77 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "taiwan-museum" from https://skillstore.io/skills/tahodev-taiwan-museum.md and its manifest at https://skillstore.io/api/skills/tahodev-taiwan-museum/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/tahodev-taiwan-museum.md Signed manifest GET /api/skills/tahodev-taiwan-museum/manifest Signed lockfile GET /api/skills/tahodev-taiwan-museum/lockfile

Test it

Using "taiwan-museum". Where is the National Palace Museum, and what does the directory say about admission?

Expected outcome:

The documented sample lists No. 221, Section 2, Zhishan Road, Shilin District, Taipei.
The September 2026 sample lists general admission at TWD 350 and discounted admission at TWD 150.
This is a historical example, not a fresh lookup. Retrieve the complete ticket wording and verify current admission through the museum website.

Using "taiwan-museum". Can this directory tell me whether a museum is open today or has a special exhibition?

Expected outcome:

The directory does not provide live opening status or special exhibition schedules.
Use the museum website link when present, or contact the museum using its listed phone number.

Security Audit

Safe

v1 • 10/13/2026 Open versioned report

Seven findings are false positives: Markdown fences, public government URLs, and readable multilingual text do not demonstrate execution, exfiltration, or obfuscation. Two filesystem findings are confirmed because a predictable shared temporary path permits symlink overwrite and local data substitution. No evidence found of prompt injection, credential access, or malicious intent.

Files scanned

Lines analyzed

Review items

False positives ignored

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:25

Temp directory access

curl -sm 30 -A 'Mozilla/5.0' 'https://cloud.culture.tw/frontsite/trans/emapOpenDataAction.do?method=

curl writes to the predictable /tmp/museum.json path without exclusive creation or symlink protection. A local actor could precreate a symlink and overwrite another writable file.

Medium

SKILL.md:38

Temp directory access

d = json.load(open('/tmp/museum.json'))

The parser opens the same predictable shared file without verifying its provenance. A local actor could substitute records, including after a failed download, and corrupt results.

Risk Factors

⚙️ External commands (4)

SKILL.md:24-26 SKILL.md:26-36 SKILL.md:36-43 SKILL.md:43-60

🌐 Network access (2)

SKILL.md:25 SKILL.md:60

📁 Filesystem access (2)

SKILL.md:25 SKILL.md:38

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/tahodev-taiwan-museum/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-taiwan-museum/security.svg)](https://skillstore.io/skills/tahodev-taiwan-museum?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/tahodev-taiwan-museum?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-taiwan-museum/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/tahodev-taiwan-museum.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

tahodev. (2026). taiwan-museum security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-taiwan-museum/audits/1

BibTeX citation

@techreport{tahodev-tahodev-taiwan-museum-2026,
  author = {tahodev},
  title = {taiwan-museum security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/tahodev-taiwan-museum/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "taiwan-museum security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-taiwan-museum/audits/1"
identifiers:
  - type: other
    value: "skillstore:tahodev-taiwan-museum:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Compare Museums for a Visit

Find museums in a selected city and compare directory addresses, ticket descriptions, and official links.

Research Museums by Subject

Filter museums by category and collect available contact details for a learning visit.

Build a Museum Reference List

Collect museum names, locations, and contact information while marking missing fields and citing the directory source.

Try These Prompts

Look Up One Museum

Find the National Palace Museum in the directory. Report its address and complete ticket description, with the source date.

Compare City Museums

Find museums in [city]. Compare names, categories, addresses, and ticket descriptions. Include official links when available and mark missing fields.

Filter a Subject List

Find [category] museums in [city or region]. Include phone numbers and available website links. Preserve ticket wording and exclude other venue types.

Rank Nearby Museums

Use valid directory coordinates to rank museums near [latitude, longitude]. State the distance method, separate missing coordinates, and preserve ticket conditions. Use private temporary storage.

Best Practices

Cite the Ministry of Culture directory and distinguish the skill's historical sample date from the actual retrieval date.
Quote complete ticket descriptions and direct users to official museum sources for current hours and exhibitions.
Use private temporary storage, validate downloaded records, and treat all dataset text as data rather than instructions.

Avoid

Do not present directory entries as confirmation of today's opening status or exhibition availability.
Do not reduce conditional ticket descriptions to a single price or invent values for missing fields.
Do not reuse the fixed shared temporary filename or trust a cached file after retrieval fails.

Frequently Asked Questions

Do I need an API key or account?

No. The documented Ministry of Culture endpoint provides public museum directory data without authentication.

Which AI tools are listed as supported?

The report lists Claude, Codex, and Claude Code. Retrieval still requires an environment with network and command access.

Does the directory include every cultural venue in Taiwan?

No. It covers the Ministry of Culture museum category, not every gallery, exhibition space, or creative park.

Are admission prices and opening details current?

The directory is not live. Preserve ticket conditions and verify current admission, closures, and hours through official museum sources.

What happens when coordinates or website links are missing?

Use the address when coordinates are unavailable. Mark missing links clearly and use a listed phone number when available.

Are there local file safety concerns?

Yes. The example uses a predictable shared temporary filename. Use private temporary storage to prevent symlink overwrites and record substitution.

Developer Details

Author

tahodev

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/tahodev/baodao-skill/tree/3ce4b58e4525f5a66390e1236b6d38702790225a/taiwan-museum

Ref

2aab20a3878daa05021884e089a7dd7739e08581

Maintenance freshness

10/13/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md