The Agent Skills Directory

[SAFE]: The skill acts primarily as a knowledge base and template repository for Israeli business norms, such as the Sunday-Thursday work week and holiday scheduling. A review of all instructions, scripts, and bundled resources reveals no malicious obfuscation, credential harvesting, or unauthorized persistence mechanisms.
[EXTERNAL_DOWNLOADS]: The scripts/morning-brief.py script makes network requests to the HebCal API (hebcal.com), which is a well-known and reputable service for Hebrew calendar data. This external communication is consistent with the skill's primary function of providing Hebrew dates and holiday awareness. The skill also suggests using standard, well-known Python packages (requests, python-dateutil).
[INDIRECT_PROMPT_INJECTION]: The morning brief script processes user-supplied tasks for display in a daily summary. While this constitutes an external data ingestion surface, the risk is negligible as the data is not used to trigger dangerous capabilities.
Ingestion points: The tasks argument in the morning-brief.py script.
Boundary markers: None; the data is printed directly into a text template.
Capability inventory: The skill and its associated script do not perform file system writes, shell command execution, or network exfiltration of ingested data.
Sanitization: No specific sanitization is performed, but the lack of exploitable tools makes the attack surface safe.

israeli-personal-assistant