upskill
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted job posting content from web searches and local files, creating a surface for indirect instructions to influence the agent. * Ingestion points: Job postings retrieved via
WebFetchand stored job data injob_search_tracker.csvandseen_jobs.json. * Boundary markers: Present in the form of instructions (Rule 8) telling the agent to treat stored gaps as data and not to follow embedded instructions, though no structural delimiters are used. * Capability inventory:Read,Write,WebFetch,WebSearch. * Sanitization: No sanitization of external text is specified before it is used in the synthesis of the learning plan. - [DATA_EXFILTRATION]: The skill accesses local files containing sensitive professional and personal data. * Evidence: Accesses
.claude/skills/job-application-assistant/01-candidate-profile.mdandjob_search_tracker.csvto compare the user's current skills against job requirements.
Audit Metadata