The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads and installs the 'shinkoku' CLI tool from the author's official repository at github.com/kazukinagata/shinkoku using the uv tool manager. This is a standard initialization step for the vendor's application.
[COMMAND_EXECUTION]: The agent executes various shell commands, including uv tool install, git rev-parse, and shinkoku ledger init, to manage dependencies, verify the environment, and initialize the local SQLite database.
[INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface as it reads and processes existing shinkoku.config.yaml and .gitignore files from the working directory. While it lacks explicit boundary markers for this data, the risk is minimized by the skill's specific focus on structured tax configuration data.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill handles sensitive personal data (My Number, address, financial status). However, it implements protective measures by saving this data only to local files and ensuring these files are added to .gitignore. It also provides explicit instructions to keep sensitive identifiers out of tool logs and agent responses.

setup