resume-ats-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, specifically resumes and job descriptions provided by users. This creates a surface for indirect prompt injection where malicious instructions could be embedded in the text to manipulate the agent's optimization logic.\n
- Ingestion points: The skill instructions in SKILL.md (Implementation Checklist) direct the agent to scan resumes and job descriptions provided by the user.\n
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious embedded content within the analyzed text.\n
- Capability inventory: The skill performs text analysis and generates structured optimization reports.\n
- Sanitization: No sanitization or filtering of the input text is mentioned in the instructions.\n- [METADATA_POISONING]: The skill-report.json file contains a 'security_audit' section that explicitly claims the skill is 'safe' and that previous static findings are false positives. This constitutes a self-referential safety claim that attempts to influence the security assessment of the skill.\n
- Evidence: The 'summary' field in skill-report.json states 'All 13 static findings are false positives... No evidence found of shell execution, data exfiltration, or prompt injection'.
Audit Metadata