korean-bond-search
GS Quant의 Instrument/Data 구조화 방식에서 영감을 받아 한국 채권을 표준 Bond Instrument 필드로 정리하고, 종목명·발행사·ISIN으로 발행조건·잔액·CALL/PUT·CB/EB/BW를 출처와 함께 검색·비교한다. Use for Korean bond lookup or comparison. Not for live quotes, YTM, credit opinions, or investment advice.
How do I install this agent skill?
npx skills add https://github.com/nomadamas/k-skill --skill korean-bond-searchIs this agent skill safe to install?
- Gen Agent Trust Hubpass
The skill searches and compares Korean bond data by processing user-provided files (JSON, CSV, TSV, HTML) using a local Python script. It utilizes a vendor-managed CLI tool (@nomadamas/k-skill) for task execution and instruction management. The skill includes robust validation for bond identifiers (ISIN) and financial units, but the ingestion of external data files for display in chat results in a standard vulnerability surface for indirect prompt injection.
- Socketpass
No alerts
- Snykwarn
Risk: MEDIUM · 1 issue
What does this agent skill do?
korean-bond-search
<!-- k-skill:cli-stub — generated by scripts/generate-skill-stubs.js; edit skill.json / instruction.md instead -->Get the full instructions (required first step)
Run this and follow its output as the primary instructions for this skill:
npx -y @nomadamas/k-skill@0 instruct korean-bond-search
The CLI detects the current runtime (Dolshoi vault/CloakBrowser vs generic) and prints only the applicable instructions, always up to date. Helper files bundled with the CLI are listed by:
npx -y @nomadamas/k-skill@0 files korean-bond-search
Keep the CLI and every coding-agent skill install current (including Vercel Agent Skills) with:
npx -y @nomadamas/k-skill@0 update
If npx is unavailable, install Node.js 18+ or follow https://github.com/NomaDamas/k-skill#readme, or read the source instructions at https://github.com/NomaDamas/k-skill/blob/main/korean-bond-search/instruction.md.
Hard rules even without the CLI
- Never execute payment, message/email delivery, final submission, cancellation, or public posting without the user's explicit approval immediately beforehand.
- Never ask for, print, or store plaintext credentials in chat, files, or shell arguments.
- Never bypass legal, physical-presence, CAPTCHA, identity-proofing, or electronic-signature boundaries.
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/nomadamas/k-skill/korean-bond-search">View korean-bond-search on skillZs</a>