academic-cv-generator
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill depends on the
python-docxlibrary for document generation. This is a well-known, legitimate package for Word file manipulation, and its use is appropriate for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it processes free-form text input to extract personal and professional details. While this represents a theoretical surface for indirect prompt injection (e.g., instructions hidden in a CV draft), the implementation uses specific regular expressions and heuristics for classification rather than executing the content. The risk is considered low as the capabilities are limited to local file system read/write operations for document creation.
Audit Metadata