Korea Eximbank (한국수출입은행) OpenAPI 환율(AP01/AP02/AP12) 조회 CLI — 날짜/통화 필터, JSON/CSV 출력 지원

This skill appears to be an instructions-only wrapper for a CLI that calls Korea Eximbank's OpenAPI and legitimately needs only your KOREAEXIM_API_KEY. However, the skill bundle does not include the CLI code or an install spec even though SKILL.md tells you to `pip install -e .` and run `eximbank-exchange`. Before installing or running anything, do the following: 1) Inspect the referenced GitHub repo (https://github.com/ChloePark85/korea-eximbank-exchange-cli) yourself — review the source, setup.py/pyproject, and entry points that create the CLI. 2) If you decide to install, avoid running `pip install -e .` in a production environment — use an isolated virtualenv or container. 3) Verify the package integrity (releases/tags) and prefer installing from an official released package rather than arbitrary master/main snapshots. 4) Limit the API key's scope and do not reuse high-privilege credentials; rotate the key if you test it with an untrusted package. 5) If you only need a quick query, consider making direct HTTP calls to the documented API endpoint instead of installing unverified code. These steps reduce supply-chain and credential-exposure risks.

Type: OpenClaw Skill Name: korea-eximbank-exchange-cli Version: 0.1.0 The skill bundle contains metadata and documentation for a CLI tool designed to query exchange rates from the official Korea Eximbank OpenAPI. The instructions in SKILL.md are consistent with the stated purpose, and the use of the KOREAEXIM_API_KEY environment variable is a standard practice for API authentication. No malicious code, data exfiltration patterns, or prompt injection attempts were identified in the provided files (_meta.json, SKILL.md).