The Agent Skills Directory

[SAFE]: The skill follows security best practices for secret management by instructing the agent to use environment variables (MASDR_TOKEN, QIWA_TOKEN, MUSANED_TOKEN, BANK_WPS_TOKEN) for API authentication rather than hardcoding credentials.
[SAFE]: All external URL references and API endpoints target official Saudi government infrastructure (e.g., GOSI, MHRSD) or established financial institutions (e.g., Arab National Bank). Verified domains include api.masdr.sa, api.qiwa.sa, api.musaned.com.sa, and api.anb.com.sa.
[COMMAND_EXECUTION]: The skill uses curl command-line templates to facilitate data exchange with the integrated APIs, which is consistent with its stated purpose of providing an HR integration guide.
[DATA_EXPOSURE]: The skill provides schemas for handling sensitive information such as National Identification Numbers (NIN), IBANs, and salary data. It mitigates risk by providing clear warnings to use sandbox environments and dummy data for testing purposes.

saudi-hr