The Agent Skills Directory

[SAFE]: The skill consists of markdown-based instructions and templates designed to guide the AI in generating salon business plans. It does not contain any scripts, binaries, or automated tasks.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill references the collection of customer data (PII) such as names and contact details for booking systems. However, it explicitly advises on security best practices, including data encryption and compliance with privacy regulations (PDPA), and lacks any automated exfiltration vectors.
[INDIRECT_PROMPT_INJECTION]: The skill's architecture involves ingesting user-provided salon contexts. As the skill does not possess capabilities to interact with the host system, network, or external APIs, this ingestion surface does not present a viable attack vector. Ingestion points: SKILL.md (Step 1: context collection). Boundary markers: templates/output-template.md (structured markdown tables). Capability inventory: None (no subprocess calls, no network operations, no file writing). Sanitization: None.

salon-owner