K Cinema Bridge

• Verdict: Pass
• Confidence: High
• Analyzed: May 1, 2026, 5:34 AM
• Findings: 1
• Version: 0.1.1

Overview

This instruction-only skill fetches public Korean cinema ranking and release data from a disclosed API and shows no evidence of hidden code, credentials, persistence, or data access.

This appears safe for its stated purpose: it is an instruction-only movie information skill that fetches public JSON data. Before installing, confirm you are comfortable with the disclosed external API being contacted when you ask for Korean cinema rankings, upcoming releases, or recommendations.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

NoteHigh Confidence

What this means

When used, the agent may make network requests to the listed public movie-data API; no credentials or local data access are indicated.

Why it was flagged

The skill instructs the agent to use WebFetch against a disclosed external API. This is purpose-aligned and read-only, but users should know the agent will contact that external site for answers.

Skill content

allowed-tools: WebFetch ... Base URL: `https://uyeong.github.io/k-cinema-bridge` ... All endpoints are accessible via `GET` requests without authentication.

Recommendation

Install if you are comfortable with the agent fetching public cinema data from the disclosed API, and avoid adding unrelated private information to requests.