tailored-resume-generator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, specifically job descriptions and candidate resumes, which creates a surface for indirect prompt injection.
- Ingestion points: Job description text and candidate background/resume content provided by the user (as described in the 'How to Use' and 'Instructions' sections of SKILL.md).
- Boundary markers: The instructions do not mandate the use of delimiters (e.g., XML tags or triple quotes) or specific 'ignore embedded instructions' warnings for the processing of user-supplied data.
- Capability inventory: The skill appears restricted to text generation; no subprocess execution, file system writes, or network operations were identified in the instructions or scripts.
- Sanitization: There are no instructions for sanitizing or escaping the external content before interpolation into the prompt context.
Audit Metadata