The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The documentation provides instructions to install an external dependency named iran-tax-mcp using the uvx tool.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from external Iranian government tax websites, presenting an attack surface for indirect prompt injection if those sources are compromised.
Ingestion points: Tools like tx_goods_search, tx_regulations_search, tx_regulation_text, and tx_faq_search fetch text content from external web APIs (tax.gov.ir, stuffid.tax.gov.ir, etc.).
Boundary markers: No explicit instruction-isolation delimiters or 'ignore' warnings for the fetched data are defined in the skill instructions.
Capability inventory: The tools are defined as read-only for information retrieval; they do not include file writing, subprocess execution, or arbitrary network posting within the skill's own logic.
Sanitization: There is no mention of sanitization or validation of the content returned from the external APIs before it is provided to the agent context.

iran-tax