The Agent Skills Directory

[SAFE]: The skill is entirely instructional and does not contain executable code, scripts, or dependencies. It provides guidance on using official government services (IRS and FEMA) for tax filing and disaster verification.
[DATA_EXPOSURE]: While the skill processes sensitive financial and personal data (SSN, AGI, basis), it explicitly instructs the agent to handle this data temporarily and forbids its storage in logs or long-term memory, adhering to privacy best practices.
[INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes user-provided descriptions of property damage. However, the instructions include specific validation steps and direct the agent to 'ask explicitly and stop' if information is missing, which serves as a mitigation. No evidence of malicious exploitation of this surface was found.

form-4684