The Agent Skills Directory

[PROMPT_INJECTION]: The skill was flagged by static detectors for concealment patterns (e.g., in Gotcha 7 and Gotcha 9). Manual review confirms these are false positives. The instructions, such as "Do not tell a user the account-fee caps already apply before July 2027" and "do not present it to the user as switching to a rival network," are constraints intended to ensure factual accuracy regarding legislative timelines and corporate ownership structures (e.g., the relationship between Golan Telecom and Cellcom). These instructions serve to prevent misinformation rather than hide malicious agent behavior.
[INDIRECT_PROMPT_INJECTION]: The skill encourages users to provide sensitive financial data, such as credit card statements and utility bills, for the purpose of a 'Subscription Audit'. While this creates an ingestion surface for untrusted data, the skill is entirely instructional and does not employ tools for data exfiltration or automated file modification. The risk is localized to the agent's interpretation of user-provided text, which is the intended functional purpose of the skill.
[EXTERNAL_DOWNLOADS]: The skill references numerous external Israeli platforms for price comparison (Zap.co.il), cashback (Cashdo, Cashback.co.il), and regulatory information (gov.il, boi.org.il). All domains are legitimate, well-known in the Israeli market, and strictly relevant to the skill's financial optimization theme. No suspicious or obfuscated URLs were found.

israeli-smart-saver