The Agent Skills Directory

[COMMAND_EXECUTION]: The skill requires the installation and execution of an external binary. It provides instructions to run cargo install --path . to install the skt tool and subsequently executes multiple subcommands including skt login, skt whoami, and skt skattemelding.
[CREDENTIALS_UNSAFE]: The skill documentation describes an opt-in configuration (SKT_STORE=file) that stores BankID session cookies in plaintext at the path ~/.config/skatteetaten-cli/*.json. While marked as opt-in for headless use, this practice exposes sensitive authentication tokens to any process with read access to the user's home directory.
[DATA_EXFILTRATION]: The skill is designed to retrieve and parse highly sensitive personal information, including bank account numbers, interest earned, and detailed tax returns (skattemelding). The instructions explicitly demonstrate how to extract this data using jq for processing. While the stated purpose is local reconciliation, this capability creates a significant surface for data exposure.
[EXTERNAL_DOWNLOADS]: The skill requires active network communication with skatt.skatteetaten.no to function. It uses a browser-based capture method to intercept session cookies from this domain.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from an external, attacker-influenceable source (the tax portal's internal JSON endpoints) and passes it to subsequent commands.
Ingestion points: Data is ingested via skt skattekort, skt skattemelding, and skt oppgjor.
Boundary markers: None identified in the prompt templates or command instructions.
Capability inventory: The skill uses subprocess calls to execute the skt binary and pipes output to jq.
Sanitization: No specific sanitization or validation of the retrieved JSON data is mentioned before it is processed or presented to the user.

skatteetaten-shared