The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Fidelity transaction CSVs. 1. Ingestion points: ~/Downloads/History_for_Account_{account_id}.csv in workflows/IngestTransactions.md. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded content are used. 3. Capability inventory: Uses ls, awk, cp, sqlite3, and uv run for data processing. 4. Sanitization: Relies on structured parsing (awk/Python) rather than string sanitization. The risk is assessed as low due to the local nature of the tools and intended use case.\n- [SAFE]: The skill uses local command execution (sqlite3, uv run, awk) to manage financial records, which is consistent with its primary purpose and limited to the local environment.\n- [SAFE]: Secret management follows best practices by instructing the user to store DATABASE_URL and SIMPLEFIN_ACCESS_URL in a .env file rather than hardcoding them.

transaction-syncing