Search skills/

k-skill Claude skills

A Korean-language collection of about 125 skills for everyday Korean services: trains, buses, real estate, courts, delivery, public data, shopping and more.

NomaDamas/k-skill 132 skills Data & analyticsProductivity & notes
Our verdict Recommended with caveats

Broad, useful and MIT licensed for Korean users, but the real instructions are fetched from npm at run time, many skills route through a third-party proxy, and usage analytics are on unless you opt out.

3/5 Depth expertise shipped ! Security Broad access 0d Maintenance Updated today 8.2K Adoption stars OK License MIT, commercial OK

What k-skill does

k-skill gives a coding agent access to Korean services and public data. The README groups the skills by area: transport (KTX timetable lookup, bus booking, Seoul subway arrivals, bike stations, transit routes via ODsay and Kakao, highway traffic), housing (real-estate transaction prices, official housing prices, building registers, LH and SH subscription notices, court auction notices), plus delivery tracking, shopping searches, civic data such as National Assembly bill votes, and sports analytics. Many skills are lookup-only and say so; the railway skill explicitly performs no login, booking or payment.

Each SKILL.md is short (about 2 KB). Instead of holding the instructions itself, it tells the agent to run npx -y @nomadamas/k-skill@0 instruct <skill> and follow the output as the primary instructions, so the real content is served by an npm package and can change between runs. Many skills call a proxy server (k-skill-proxy) that forwards requests to public APIs, with its own privacy policy. Each SKILL.md repeats three hard rules: no payment, sending or final submission without explicit approval beforehand; no plaintext credentials; no bypassing CAPTCHA or identity checks. The README is in Korean, and several skills have disclaimers and reference files. Python 3.11 and uv are needed for the KTX helper.

Good for

  • Users in Korea who want an agent to query transport, housing and public data
  • Developers building Korean-market agents who want working API recipes
  • People who read Korean; the README and skill descriptions are in Korean

Not for

  • Anyone who needs fully offline or pinned skill instructions, since the content is fetched at run time
  • Users outside Korea; almost all skills target Korean services

What's inside depth 3/5

132 skills but only about 2 KB of SKILL.md each; the folders do add references and, in some cases, scripts and tests, though the main instructions live in an external CLI.

Skills
132
Reference docs
247
Scripts
158
Tests / evals
68
Templates
20
Avg SKILL.md
2 KB

Counted from the repository file tree. How we score depth.

Dependencies and costs

  • Node.js 18 or later and npx
  • Python 3.11+ and uv for the KTX timetable helper
  • Some skills use third-party APIs (for example ODsay and Kakao) via the k-skill-proxy server or your own API keys
  • Telemetry: The README says CLI usage analytics are collected for usage statistics only, not command arguments, raw input, file contents or credentials. Set KSKILL_ANALYTICS_DISABLED=1 to opt out. Skills that use k-skill-proxy are covered by a separate privacy policy on the proxy site.

Security review

Broad access

This skill asks for more access than most, or sends data to another service. That is usually a design choice rather than bad intent, but you should know before you install it.

  • Loads instructions from a server at run timeEach generated SKILL.md is a stub that tells the agent to run npx -y @nomadamas/k-skill@0 instruct <skill> and follow its output as the primary instructions, so the real instructions come from an npm package release line rather than the repo files.animal-pharmacy-search/SKILL.md:17

A large Korean public-data and utility skill collection. Each SKILL.md is only a stub that tells the agent to run an unpinned npx -y @nomadamas/k-skill@0 instruct <skill> and follow its output, and many helpers send your queries to an author-run proxy by default unless you supply your own API key. Usage analytics are on by default with an env-var opt-out, and a few helpers log in to Korean sites with credentials you place in env vars. Most of the repo was not available to read.

Worth knowing

  • Runs remote code at an unpinned versionRuns npx -y @nomadamas/k-skill@0 (major-version range, auto-accepted) on every skill use, plus npx --yes skills add for install and npx k-skill-rhwp in fill_official_hwp.py.animal-pharmacy-search/SKILL.md:17
  • Sends usage data by default (can be turned off)The CLI collects usage statistics by default (README says no command arguments, raw input, file contents or credentials); set KSKILL_ANALYTICS_DISABLED=1 to opt out.README.md:14
  • Makes network requestsHelpers call public Korean APIs and, when you have no key of your own, the author-run proxy https://k-skill-proxy.nomadamas.org, which receives your query parameters (addresses, business numbers, locations); scraping helpers also hit Daangn, Danawa, KOBUS and other sites.building-register-search/scripts/building_register.py:23
  • Needs an API key for its own servicePer-service API keys (BOK ECOS, data.go.kr serviceKey, DART, etc.) are read from env vars or ~/.config/k-skill/secrets.env and sent only to the matching service in direct mode.bok-ecos-stats/scripts/bok_ecos.py:42
  • Installs packages or toolsOn first run builds a private venv in a cache directory and pip-installs a pinned fast_flights package, then re-executes itself; foresttrip needs pip install playwright and Chromium.flight-ticket-search/scripts/flight_ticket_search.py:82
  • Changes files outside your projectLogs in to foresttrip.go.kr with KSKILL_FORESTTRIP_ID/PASSWORD via headless Playwright and caches the resulting session cookies in ~/.cache/k-skill/foresttrip-vacancy/session.json (chmod 600); also uses ~/.config/k-skill/secrets.env.foresttrip-vacancy/scripts/run_foresttrip_vacancy.py:149
  • Relies on a CLI or package we could not reviewCalls npx k-skill-rhwp and the @nomadamas/k-skill CLI, whose code is not in the repo.corporate-registration-consulting/scripts/fill_official_hwp.py:41

What we checked

The repository (2131 files) on Oct 29, 2026. Not a full review: 1898 of 2131 files were not downloaded (large repository; we reviewed the skill folders); we read 6 of 58 code files; it relies on code outside the repository: npm package @nomadamas/k-skill (the `instruct`, `files` and `update` CLI that actually supplies each skill's instructions); npm packages skills, k-skill-rhwp, bunjang-cli, ev-subsidy-status and other npx tools referenced by individual skills; Hosted proxy https://k-skill-proxy.nomadamas.org and its privacy policy.

NVIDIA SkillSpector static scan: 156 pattern hits (Prompt Injection 41, Rogue Agent 40, MCP Rug Pull 35, Dangerous Code Execution 12, Data Exfiltration 11, Privilege Escalation 10). CRITICAL tainted-flow hits are scripts reading a service API key from the environment and calling that service (or the proxy) with urllib; the 40 'hidden instructions' hits are the same HTML comment marking each SKILL.md as a generated stub; 'edit skill' is that comment's text; the os.execve is the flight script re-launching itself in its own venv; the 'obfuscated code' hit is a licence blob inside a test fixture HTML.

A review, not a certification. Skills change after we check them — read the files before installing.

License

MIT for the repository; the proxy server directory (packages/k-skill-proxy) is AGPL-3.0-only.

Can it run unattended?

Not really. Skills are on-demand lookups and assisted bookings with explicit approval gates, not long-running loops.

Alternatives to k-skill

Wind AliceMarket

Wind-Alice/AliceMarket

Chinese-language finance skills for A-share and global equity analysis, plus Wind data and agent entry points that need a Wind API key.

With caveats Check first Depth 2/5

Paperasse

romainsimon/paperasse

Six French-language skills for accounting, tax, notary, audit and co-ownership paperwork, with reference data and test cases.

With caveats Check first Depth 5/5

FAQ

What is k-skill?

k-skill is a Korean collection of about 125 agent skills for everyday Korean services, such as KTX timetables, subway arrivals, real-estate prices, court auction notices and parcel tracking. Its README and skill descriptions are written in Korean.

How do I install k-skill?

Run npx --yes skills add NomaDamas/k-skill --all -g to install every skill, or add --skill <name> for one. Claude Code users can also use the marketplace route described in docs/install.md.

Is k-skill safe to use?

The skills carry explicit rules against unapproved payments and plaintext credentials, and the project is open source. Be aware that instructions are fetched from an npm package at run time, some skills send requests through a proxy server, and analytics can be disabled with KSKILL_ANALYTICS_DISABLED=1.

Does k-skill book tickets or make payments?

Some skills, such as the bus booking ones, support reservations, while the KTX skill is lookup-only with no login, booking or payment. The shared rules say payment or final submission needs your explicit approval first.

Sources: GitHub repository (stars, license, file tree, last push Oct 29, 2026). Review based on the README and SKILL.md files as published.