The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The scripts scripts/bb.sh and scripts/bb-setup.sh include logic to automatically download and run the Bitwarden CLI via nix-shell if the tool is not found locally. This allows for automated dependency management from a trusted source.
[COMMAND_EXECUTION]: The skill executes local shell scripts to perform accounting tasks. The scripts are written using secure patterns, such as using temporary configuration files for curl to avoid passing sensitive API credentials as command-line arguments.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data retrieved from the BuchhaltungsButler API (such as receipt metadata or transaction purposes). While this provides a surface for indirect prompt injection, the skill specifically instructs the agent to display all proposed entries in a table and wait for explicit user confirmation before performing any write operations, effectively providing a human-in-the-loop security boundary.

buchhaltungsbutler