The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes the e-boekhouden-pp-cli binary for all accounting tasks. Operations include fetching balances, creating mutations, and generating financial reports. Destructive operations (creation/deletion) are clearly documented and often include safety guards (e.g., the --dry-run default for mutations).
[EXTERNAL_DOWNLOADS]: The skill fetches its primary binary and configuration from the vendor's official domain (mvanhorn.com). These are documented neutrally as legitimate vendor resources per security guidelines.
[REMOTE_CODE_EXECUTION]: The skill provides an installation command using npx -y @mvanhorn/e-boekhouden-pp-cli-installer. This is a standard package installation method for the vendor's own tool and does not represent an unverifiable dependency or malicious RCE pattern.
[DATA_EXFILTRATION]: While the skill can export accounting data to local files or webhooks (--output file:<path> or --output webhook:<url>), these are user-directed configuration flags for integration purposes. There is no evidence of unauthorized data exfiltration to attacker-controlled servers.
[CREDENTIALS_UNSAFE]: The skill correctly advises users to store the EBOEKHOUDEN_API_TOKEN in an .env file or environment variables, following standard safe practices for secret management. No hardcoded credentials were found.

pp-e-boekhouden