技能 estat-stats

📦

estat-stats

Name: estat-stats
Author: tahodev

內容修訂 r1 低風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

Find and Retrieve Japanese Government Statistics

Japanese statistical tables use table identifiers and dimension codes that can be difficult to navigate. This skill guides table search, metadata inspection, and filtered retrieval through the official e-Stat API.

支援: Claude Codex Code(CC)

📊 74 尚可

Maintain this Skill? Claim it 📊 74 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "estat-stats" from https://skillstore.io/skills/tahodev-estat-stats.md and its manifest at https://skillstore.io/api/skills/tahodev-estat-stats/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/tahodev-estat-stats.md 已簽名 manifest GET /api/skills/tahodev-estat-stats/manifest 已簽名 lockfile GET /api/skills/tahodev-estat-stats/lockfile

測試它

正在使用「estat-stats」。 Explain the metadata needed to retrieve total population from the documented example table.

預期結果:

The skill uses table 0000150002 as its population-estimates example.
Its documented filters select total age and total sex using code 000 for both dimensions.
Confirm those codes with current metadata and map returned time and area codes to their labels.
Actual values require a live request with a valid appId.

正在使用「estat-stats」。 The request returned HTTP 200, but the application status is 100. Did retrieval succeed?

預期結果:

No. The documented status 100 indicates authentication failure even when HTTP status is 200.
Check that ESTAT_APP_ID is configured without printing its value.
Verify the appId in your e-Stat account before requesting data again.

安全審計

低風險

v1 • 2026/10/13 開啟版本化報告

All 30 static findings are false positives involving Markdown formatting, official e-Stat URLs, a documentation link, and readable Japanese text. No evidence found of prompt injection, malicious execution, or unauthorized data exfiltration. One separate concern remains: expanded API keys enter curl process arguments and may be visible to local process inspection or monitoring.

已掃描檔案

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

低

SKILL.md:25 SKILL.md:39 SKILL.md:48

API Key Exposure Through Process Arguments

Each curl example expands ESTAT_APP_ID into a URL passed as a process argument. Local process inspection or monitoring may expose the credential.

Shell expansion places the environment variable value directly in curl arguments. Exposure depends on local process visibility and monitoring; no malicious intent is evident.

風險因素

⚙️ 外部命令 (21)

🌐 網路存取 (6)

SKILL.md:18 SKILL.md:20 SKILL.md:25 SKILL.md:39 SKILL.md:48 SKILL.md:63

📁 檔案系統存取 (1)

SKILL.md:57

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/tahodev-estat-stats/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-estat-stats/security.svg)](https://skillstore.io/skills/tahodev-estat-stats?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/tahodev-estat-stats?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-estat-stats/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/tahodev-estat-stats.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

tahodev. (2026). estat-stats security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-estat-stats/audits/1

BibTeX 引用

@techreport{tahodev-tahodev-estat-stats-2026,
  author = {tahodev},
  title = {estat-stats security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/tahodev-estat-stats/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "estat-stats security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-estat-stats/audits/1"
identifiers:
  - type: other
    value: "skillstore:tahodev-estat-stats:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Locate Population Tables

Find relevant population tables and inspect their dimensions before retrieving research data.

Check Official Economic Sources

Search for GDP or CPI tables and identify official sources for a report.

Retrieve Filtered Statistical Values

Use metadata-derived codes and pagination to collect public statistics for a data workflow.

試試這些提示

Find a Statistical Table

Find up to five e-Stat population tables. Show their IDs, titles, and responsible agencies. Use my configured appId without displaying it.

Inspect Table Dimensions

Inspect metadata for e-Stat table [table ID]. Explain its dimensions and available region, time, and category codes before requesting values.

Retrieve Filtered Values

Retrieve [measure] from table [table ID] for [region] and [period]. Verify filter codes using metadata. Report labels, units, and source attribution.

Retrieve Multiple Pages Reliably

Retrieve all matching values from [table ID] using [filters]. Paginate with response counters, pace requests, check application status, and report incomplete retrieval.

最佳實務

Keep the appId out of chat, commits, process arguments, and logs; use a credential-safe request method.
Inspect metadata before choosing filters, map codes to labels, and include official source attribution.
Check application status, apply timeouts, pace paginated requests, reuse results, and limit retries.

避免

Assuming HTTP 200 means the statistical request succeeded.
Reusing classification codes across tables without checking metadata.
Treating one limited response page as a complete dataset.

常見問題

Do I need an API key?

Yes. Obtain an appId through e-Stat registration and configure it outside chat or committed files.

Which statistics can I search?

The skill targets e-Stat tables, including population, GDP, CPI, labor, and regional statistics. Availability depends on the service.

Does this package include an executable client?

No. It provides API instructions and curl examples. Live requests require suitable tools and network access.

Why inspect metadata before retrieving values?

Metadata defines each table's dimensions and classification codes. It helps select valid filters and interpret returned values.

Can HTTP 200 still indicate failure?

Yes. Check the response application status. The skill documents status 100 for authentication failure and status 0 for success.

Do retrieved statistics need attribution?

The skill states that outputs using retrieved data need source credit. Review the linked e-Stat attribution requirements.

開發者詳細資訊

作者

tahodev

授權

MIT

Skillstore 修訂

版本提示

作者未聲明版本。

儲存庫

https://github.com/tahodev/kurashi-skill/tree/09cb7f9eac85f0c85633cce08328a1a57854a94f/estat-stats

引用

7f17813fb6af1acc7d8fd3fb5f05480f5be52783

維護新鮮度

2026/10/13

使用量

0 次下載 · 0 次瀏覽

檔案結構

📄 SKILL.md