The Agent Skills Directory

[SAFE]: The skill manages sensitive financial data and authentication sessions locally (within ~/.finance-substrate/) and includes explicit documentation and guards to prevent sensitive information from being committed to version control.
[SAFE]: In scripts/parse_engine.py, the skill implements a custom tokenizer and arithmetic evaluator (evaluate_expression) to handle declarative parser logic. This intentionally avoids the use of the unsafe Python eval() function, significantly reducing the risk of dynamic code injection.
[COMMAND_EXECUTION]: The skill uses subprocess.run to invoke the gws (Google Workspace) CLI and to perform version checks. These calls use list-based arguments without a shell, which is a secure method for executing system commands.
[EXTERNAL_DOWNLOADS]: The scripts/fetch_trm.py script fetches daily exchange rates from datos.gov.co. This is the official open data portal of the Colombian government, which is a trusted and well-known service.
[SAFE]: The skill includes a 'self-healing' mechanism (scripts/self_heal.py) that performs integrity checks on parsed data and cross-validates information between different sources (certificates vs. exogena reports), ensuring data consistency and detecting potential extraction anomalies.

finance-substrate