Confirm the source
Compare the repository, publisher, and installation command before continuing.
✓
Third-party audit
PassedGen Agent Trust Hub
railway-timetable · nomadamas/k-skill
Provider summary
The skill performs read-only timetable lookups by fetching official public Excel files from Korail. It invokes a CLI tool from the vendor's own verified npm package namespace to execute commands. A low-severity risk of indirect prompt injection exists due to the processing of external data via network downloads, though robust text parsing and regex validations are implemented.
The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- pass
- Risk level
- NONE
- Audited
- Sep 18, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.