The Agent Skills Directory

[SAFE]: The skill contains educational documentation and Python code snippets for building billing automation. All logic, including subscription state management, dunning processes, and tax calculation, is standard for the stated purpose. No executable malicious code, persistence mechanisms, or unauthorized privilege escalations were detected.
[INDIRECT_PROMPT_INJECTION]: The skill demonstrates an ingestion surface for untrusted data which could be susceptible to indirect prompt injection if implemented without sanitization.
Ingestion points: Customer data such as name and address are interpolated into the Invoice.to_html method in SKILL.md.
Boundary markers: None present in the code snippets.
Capability inventory: The code interacts with the Stripe API and includes a placeholder send_email function.
Sanitization: The instructional snippets do not include explicit HTML escaping or data validation logic.

billing-automation