Is kosis-api safe to install?

SaferSkills independently audited kosis-api (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/kosis-api/SKILL.md · 1 file

skills/kosis-api/SKILL.md2.1 KB · Markdown

name: kosis-api

description: Work with Korean Statistical Information Service KOSIS OpenAPI data using the local kosis-mcp repository as a reusable Python API client. Use when Codex needs to search KOSIS tables, inspect table metadata, call statistics data APIs, handle KOSIS API quirks, process large responses, create charts or reports from KOSIS data, or refresh KOSIS official API documentation context without using the MCP server layer.

KOSIS API

Use this skill to work with KOSIS OpenAPI through the local Python client modules in this repository. Prefer direct Python module calls over starting the MCP server.

Default Workflow

Identify the KOSIS task: search, metadata inspection, data fetch, large data, explanation, key indicator, transform, chart, or report.
Load only the reference file needed for that task.
Use src/kosis_tools/ clients directly.
Require KOSIS_API_KEY before live KOSIS calls.
Search or inspect metadata before fetching data.
Fetch a small bounded slice first, then expand.
Report table id, organization id, period, unit, endpoint, and limits.

Reference Routing

For available official API groups, limits, and source URLs, read references/official-api-index.md.
For ordinary statistics data calls and period/classification parameters, read references/statistics-data.md.
For which repository module to reuse, read references/repo-client-map.md.

Add or read more reference files only when the task needs them. Keep official manual details in references, not here.

Scripts

Use scripts/kosis_call.py for a quick authenticated raw API check.
Prefer repository modules for production work; the script is a smoke-test and debugging helper.

Constraints

Do not use the MCP server layer unless the user explicitly asks for MCP behavior.
Do not browser-scrape KOSIS pages when an OpenAPI endpoint or official PDF reference is sufficient.
Do not load the full official PDF into context. Extract or open only the relevant reference section.
Treat older deployment URLs and production-status claims in repository docs as stale until verified.

kosis-api— agent skill

Is kosis-api safe to install?

KOSIS API

Default Workflow

Reference Routing

Scripts

Constraints

Audit the pieces. Scan the whole. Decide.