Skip to main content

korean-transit-route

Provides door-to-door public transit routing in Korea using ODsay LIVE API and Kakao geocoding for efficient travel planning.

Install this skill

or
63/100

Security score

The korean-transit-route skill was audited on May 17, 2026 and we found 13 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 57

Template literal with variable interpolation in command context

SourceSKILL.md
57```bash
medium line 103

Template literal with variable interpolation in command context

SourceSKILL.md
103```bash
medium line 60

Curl to non-GitHub URL

SourceSKILL.md
60curl -s "https://api.odsay.com/v1/api/searchPubTransPathT?apiKey=${KEY}&SX=${SX}&SY=${SY}&EX=${EX}&EY=${EY}&OPT=0&SearchPathType=${TYPE}"
medium line 104

Curl to non-GitHub URL

SourceSKILL.md
104curl -s "https://api.odsay.com/v1/api/searchStation?apiKey=${KEY}&stationName=강남&CID=1000"
medium line 23

Access to hidden dotfiles in home directory

SourceSKILL.md
23- 환경변수 `ODSAY_API_KEY` 가 있으면 사용. 없으면 `~/.config/k-skill/secrets.env` 에서 로드.
low line 58

Access to hidden dotfiles in home directory

SourceSKILL.md
58set -a; . ~/.config/k-skill/secrets.env; set +a
medium line 23

Access to .env file

SourceSKILL.md
23- 환경변수 `ODSAY_API_KEY` 가 있으면 사용. 없으면 `~/.config/k-skill/secrets.env` 에서 로드.
low line 58

Access to .env file

SourceSKILL.md
58set -a; . ~/.config/k-skill/secrets.env; set +a
low line 24

External URL reference

SourceSKILL.md
24- ODsay Server 키는 호출 IP 화이트리스트 등록 필수. 발급은 https://lab.odsay.com
low line 35

External URL reference

SourceSKILL.md
351. `https://k-skill-proxy.nomadamas.org/v1/kakao-local/geocode?q=<주소/장소명>`
low line 42

External URL reference

SourceSKILL.md
42PROXY=os.environ.get('KSKILL_PROXY_BASE_URL','https://k-skill-proxy.nomadamas.org').rstrip('/')
low line 60

External URL reference

SourceSKILL.md
60curl -s "https://api.odsay.com/v1/api/searchPubTransPathT?apiKey=${KEY}&SX=${SX}&SY=${SY}&EX=${EX}&EY=${EY}&OPT=0&SearchPathType=${TYPE}"
low line 104

External URL reference

SourceSKILL.md
104curl -s "https://api.odsay.com/v1/api/searchStation?apiKey=${KEY}&stationName=강남&CID=1000"
Scanned on May 17, 2026
View Security Dashboard
Installation guide →
GitHub Stars 5.3K
Rate this skill
Categorysupport
UpdatedJune 10, 2026
NomaDamas/k-skill