K Cinema Bridge
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
When used, the agent may make network requests to the listed public movie-data API; no credentials or local data access are indicated.
Why it was flagged
The skill instructs the agent to use WebFetch against a disclosed external API. This is purpose-aligned and read-only, but users should know the agent will contact that external site for answers.
Skill content
allowed-tools: WebFetch ... Base URL: `https://uyeong.github.io/k-cinema-bridge` ... All endpoints are accessible via `GET` requests without authentication.
Recommendation
Install if you are comfortable with the agent fetching public cinema data from the disclosed API, and avoid adding unrelated private information to requests.