기상청 날씨 (KMA Weather Korea)

• Outcome: Pass
• Latest audit: May 28, 2026, 6:47 AM
• Version:
  2.2.0

Overview

This is a weather helper that uses a data.go.kr API key for Korean weather and air-quality lookups, with minor credential-handling issues users should fix before use.

Install only if you are comfortable providing a data.go.kr API key for Korean weather and air-quality requests. Store the key with restrictive permissions, and review or edit morning_briefing.sh so it reads your own config path rather than the hard-coded /home/scott path before running scheduled briefings.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Session Persistence

Medium

• Category: Rogue Agent

Content

2. 로그인 → 마이페이지 → **일반 인증키(Decoding)** 복사
3. API 키 저장:
   ```bash
   mkdir -p ~/.config/data-go-kr
   echo "YOUR_API_KEY" > ~/.config/data-go-kr/api_key
   ```
4. 아래 서비스 **활용신청** 후 사용 (자동승인)

• Confidence: 81% confidence
• Finding: mkdir -p ~/.config/data-go-kr echo "YOUR_API_KEY" > ~/.config

VirusTotal

65/65 vendors flagged this skill as clean.