The Agent Skills Directory

[COMMAND_EXECUTION]: The skill requests the Bash tool to perform file system operations and to execute scripts that generate Excel (.xlsx) and PDF documents from aggregated financial data.
[DATA_EXFILTRATION]: The skill is designed to move sensitive financial data to external cloud storage providers, specifically Yandex Disk and Cloud Mail.ru. While this is the stated purpose of the skill, it involves the transmission of sensitive business information to third-party services.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted financial data from external sources, creating a potential surface for indirect prompt injection attacks.
Ingestion points: Financial records from 1C/MoySklad and payment records from YKassa, Tinkoff, SBP, and bank statements provided via the ~~платежи and ~~бухгалтерия context placeholders.
Boundary markers: The instructions do not define explicit delimiters or warnings to the model to ignore potential instructions embedded within the transaction descriptions or metadata.
Capability inventory: The skill possesses file-writing capabilities (.xlsx, .pdf), network access via WebFetch, and arbitrary command execution via Bash.
Sanitization: There is no mention of sanitizing or escaping the retrieved transaction data before it is interpolated into summaries or processed by the report generation scripts.

close-month