The Agent Skills Directory

[SAFE]: The skill provides documentation and examples for using the 'gpd' command-line interface to manage Google Play monetization. The instructions are consistent with the stated purpose of adjusting region-specific pricing. No malicious patterns were detected.
[DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials or sensitive data exposure were found. The mention of the GPD_SERVICE_ACCOUNT_KEY environment variable follows security best practices for credential management by avoiding hardcoded secrets.
[INDIRECT_PROMPT_INJECTION]: The skill includes a surface for indirect prompt injection via the processing of local configuration files.
Ingestion points: Reads data from migrate.json, offer.json, offers.json, and states.json (referenced in SKILL.md).
Boundary markers: None present; the skill assumes the provided JSON files are well-formed and trusted.
Capability inventory: Execution of gpd monetization commands for creating and updating products, plans, and offers via API calls.
Sanitization: No explicit sanitization of JSON content is shown, which is typical for developer-centric CLI utilities. As this is the intended primary purpose of the skill and involves structured local data, it is classified as safe.

gpd-ppp-pricing