The Agent Skills Directory

[SAFE]: The skill's primary purpose is drafting legal documents (heskem matan sherutim) for Israeli freelancers, following local laws such as the 2017 Prompt Payment to Suppliers Law and the 2007 Copyright Law.
[COMMAND_EXECUTION]: The skill includes a local utility script scripts/build_agreement.py. This script is a simple template engine that takes command-line arguments (provider name, client ID, fee, etc.) and generates a Markdown file. Analysis of the source code confirms it uses only Python standard libraries (argparse, sys, datetime) and contains no malicious operations or dynamic execution patterns like eval() or exec().
[EXTERNAL_DOWNLOADS]: All external links provided in the skill documentation and evidence.json point to authoritative Israeli legal and government domains (e.g., nevo.co.il, gov.il, knesset.gov.il). These are used exclusively for user reference and verification of legal claims.
[DATA_EXPOSURE]: The skill asks for standard business identification data (ID numbers, business names) to populate the contract fields. This data is processed locally by the script to create the output document and is not exfiltrated or stored insecurely.
[INDIRECT_PROMPT_INJECTION]: While the skill ingests user data to build a document, it lacks the dangerous capability tier (such as arbitrary shell execution or network requests based on that data) required to escalate this to a security risk. The injection surface is limited to document generation.

israeli-freelancer-service-agreement