The Agent Skills Directory

[SAFE]: The skill reads snapshot files from ~/.smtm/sessions/ and writes reports to ~/.smtm/reports/. This activity is restricted to the application's own data directory and is necessary for its core functionality.
[INDIRECT_PROMPT_INJECTION]: The skill merges content from external files into a report format. 1. Ingestion points: Markdown snapshot files located in ~/.smtm/sessions/{project}/. 2. Boundary markers: The skill does not explicitly define markers to prevent instruction execution from snapshots, though it uses standard Markdown headers for output structure. 3. Capability inventory: Limited to file read, directory creation (mkdir -p), and file writes within the specific ~/.smtm/ directory. It does not use network or dynamic code execution tools. 4. Sanitization: Source content is merged as-is to ensure traceability. This surface is assessed as safe given the intended purpose of documenting user-provided state and the absence of high-risk capabilities.

money-report