zipcode-search
Look up a Korean postcode and official English address from a known address with the official ePost integrated search page.
How do I install this agent skill?
npx skills add https://github.com/nomadamas/k-skill --skill zipcode-searchIs this agent skill safe to install?
- Gen Agent Trust Hubfail
The skill fetches Korean postcode data from the official ePost website. However, the implementation is vulnerable to a local file inclusion attack because it uses curl's --data-urlencode flag with unvalidated user input. This could allow an attacker to read sensitive files from the system and transmit them to the external ePost server.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
- ZeroLeakspass
Score: 93/100 · 2 sections analyzed
What does this agent skill do?
zipcode-search
<!-- k-skill:cli-stub — generated by scripts/generate-skill-stubs.js; edit skill.json / instruction.md instead -->Get the full instructions (required first step)
Run this and follow its output as the primary instructions for this skill:
npx -y @nomadamas/k-skill@0 instruct zipcode-search
The CLI detects the current runtime (Dolshoi vault/CloakBrowser vs generic) and prints only the applicable instructions, always up to date. Helper files bundled with the CLI are listed by:
npx -y @nomadamas/k-skill@0 files zipcode-search
If npx is unavailable, install Node.js 18+ or follow https://github.com/NomaDamas/k-skill#readme, or read the source instructions at https://github.com/NomaDamas/k-skill/blob/main/zipcode-search/instruction.md.
Hard rules even without the CLI
- Never execute payment, message/email delivery, final submission, cancellation, or public posting without the user's explicit approval immediately beforehand.
- Never ask for, print, or store plaintext credentials in chat, files, or shell arguments.
- Never bypass legal, physical-presence, CAPTCHA, identity-proofing, or electronic-signature boundaries.
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/nomadamas/k-skill/zipcode-search">View zipcode-search on skillZs</a>