The Agent Skills Directory

[SAFE]: The skill instructions do not contain any detected malicious patterns, such as direct prompt injection, credential harvesting, or unauthorized data exfiltration.
[PROMPT_INJECTION]: The skill utilizes WebSearch and WebFetch tools to retrieve platform-specific information. While this introduces an attack surface for indirect prompt injection from third-party websites, it is a standard operational risk for search-enabled agents.
Ingestion points: External web content retrieved via WebSearch and WebFetch (SKILL.md).
Boundary markers: The instructions do not define specific delimiters to isolate external data from internal logic.
Capability inventory: The skill utilizes Bash, Write, Edit, and Skill tools (SKILL.md).
Sanitization: No explicit sanitization or validation of external tool output is provided.

money-plan