The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Playwright CLI (playwright-cli) and browser automation tools to navigate and interact with the Japanese tax preparation website. All network operations are directed to the well-known official domain keisan.nta.go.jp.\n- [DYNAMIC_EXECUTION]: A custom initialization script (etax-stealth.js) is used to spoof the browser's environment properties (such as navigator.platform and navigator.userAgent). Additionally, the skill provides instructions for manual JavaScript injection to override server-side environment detection functions (getClientOS). These measures are documented as necessary workarounds for compatibility issues with the tax portal's environment filtering.\n- [DATA_EXFILTRATION]: The skill reads local configuration and progress files (shinkoku.config.yaml, .shinkoku/progress/) that contain highly sensitive personal information, including taxpayer identities and tax identification numbers. This data is handled according to the primary purpose of the skill: submitting it to the official government tax agency.\n- [INDIRECT_PROMPT_INJECTION]: The skill interacts with the external tax portal, creating an ingestion surface for untrusted web content. However, this risk is mitigated by explicit manual verification steps and the requirement for user-driven final submission.\n- [SAFE]: The skill incorporates extensive safety protocols. It mandates pausing for manual user operation during the QR code authentication phase and strictly forbids the AI agent from automatically clicking the final submission button, requiring the user to review the data and complete the filing manually.

e-tax