The Agent Skills Directory

[SAFE]: The skill facilitates communication with official Saudi government endpoints (api.fasah.zatca.gov.sa and api.zatca.gov.sa). These are trusted domains belonging to the Zakat, Tax and Customs Authority.
[SAFE]: Sensitive authentication is managed via the FASAH_TOKEN environment variable. This is a secure and standard practice for handling credentials without hardcoding them into the skill logic.
[DATA_EXFILTRATION]: All network activity is directed toward the official services required for the skill's functionality. There are no patterns indicating that user data or environment variables are being exfiltrated to unauthorized third-party servers.
[PROMPT_INJECTION]: The instructions are focused on API interaction and documentation. No override patterns, jailbreak attempts, or safety bypass instructions were detected.
[COMMAND_EXECUTION]: The skill uses standard curl commands for API requests as intended for its functionality on supported platforms (Linux/macOS), with no signs of arbitrary or malicious command execution.

saudi-customs