OpenDART Disclosure

Read Korea OpenDART disclosures using the OpenDART API. Use when the user asks for DART 공시 조회, recent filings by company, filtering by filing type/date, or q...

Security Scan

The skill appears to implement an OpenDART client that behaves as described, but its metadata omits that an API key is actually required and the included script writes a cache to the user's home directory—this mismatch and small scope creep should be clarified before use.

Purpose & Capability

Name/description match the code and SKILL.md: the tool queries OpenDART endpoints and returns filings. However the skill metadata declares no required credentials while both SKILL.md and the bundled script require an OpenDART API key (OPENDART_API_KEY or --api-key).

Instruction Scope

Runtime instructions are narrowly scoped to resolving company identity and calling OpenDART list/corpCode endpoints via the provided script. The agent is not instructed to read unrelated system files or contact unexpected external hosts; it does recommend citing the DART filing URL.

Install Mechanism

No install spec (instruction-only) and the included Python script runs without additional package installs. There is no download from arbitrary URLs or binary installation.

Credentials

The script enforces an API key (via --api-key or OPENDART_API_KEY) and will exit if missing, but the skill registry lists no required env vars/primary credential. Requiring a single service API key is proportionate to the purpose, but the metadata omission is an incoherence that could confuse users or lead to failed runs.

Persistence & Privilege

The script creates and writes a cache at ~/.cache/opendart/corpcode.json. This is limited persistence scoped to the user's home directory and consistent with caching corp-code data, but users should be aware it writes to disk.

What to consider before installing

This skill appears to do what it claims (query OpenDART and return filings). Before installing: (1) be aware the bundled script requires an OpenDART API key (provide via --api-key or OPENDART_API_KEY) even though the registry metadata doesn't list it; (2) review the included script if you can — it caches corp codes to ~/.cache/opendart/corpcode.json and makes HTTP(S) requests only to opendart.fss.or.kr and dart.fss.or.kr; (3) ensure the API key you provide is limited to OpenDART usage and not reused for other services; and (4) ask the publisher to update the skill metadata to declare OPENDART_API_KEY as a required credential to remove the mismatch. If you cannot verify the source of the skill or the API key handling, do not install it.

Fetch and summarize Korean corporate disclosures from OpenDART.

Inputs to collect

• Company identifier: corp_code (preferred) or company name
• Date range: bgn_de / end_de in YYYYMMDD
• Filing type filters (optional): regular report (A), major issue (B), shares (C), etc.
• Desired output: latest N items, only links, or short summary

Workflow

1. Resolve company identity.
   • If user gave corp_code, use it directly.
   • If user gave company name, run the script search-corp first.
2. Pull disclosures with recent.
3. Sort by latest and keep user-requested count.
4. Return:
   • filing date
   • report name
   • receipt number
   • OpenDART link (https://dart.fss.or.kr/dsaf001/main.do?rcpNo=<rcept_no>)
5. If asked, add a concise Korean summary of key points.

Commands

Use bundled script:

python3 scripts/opendart.py search-corp --name "삼성전자"
python3 scripts/opendart.py recent --corp-code 00126380 --from 20260101 --to 20261231 --limit 10
python3 scripts/opendart.py recent-by-name --name "삼성전자" --from 20260101 --to 20261231 --limit 10

# Shortcuts (less typing)
python3 scripts/opendart.py recent-by-name --name "삼성전자" --days 7 --limit 10
python3 scripts/opendart.py recent-by-name --name "삼성전자" --today

API key options:

• --api-key <KEY>
• or env var OPENDART_API_KEY

Notes

• OpenDART returns status codes in JSON. Treat non-000 as API-level failure and report clearly.
• Company-name matching can be fuzzy. Show top candidates if multiple are close.
• Prefer citing the direct DART filing URL in final answers.
• For endpoint details and corp-code behavior, read references/opendart-endpoints.md.