Scanned skills

nomadamas/k-skill national-pension-workplace

Checked the catalogued skill at national-pension-workplace.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 1
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

1 finding
securityhigh SD-022
instruction.md
5 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/national_pension_workplace.py

The code merely imports urllib.request, a standard library for legitimate network operations.

securityhigh SD-007 benign_example
scripts/national_pension_workplace.py

It references a known proxy URL likely used for legitimate API access, not an arbitrary external host.

securityhigh SD-007 benign_example
scripts/national_pension_workplace.py

It uses urllib.request to read a JSON response from a trusted proxy, a common legitimate pattern.

securityhigh SD-007 benign_example
scripts/national_pension_workplace.py

The urllib.request.urlopen call is part of a structured API client, not a suspicious request.

securityhigh SD-007 benign_example
scripts/national_pension_workplace.py

It builds a request to a known proxy service to fetch national pension data, intended for legitimate use.