resume-analyzer
Warn
Audited by Snyk on Aug 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能在工作流程“读取简历”步骤中直接调用
scripts/read_pdf.py对用户提供的PDF路径/文件夹进行解析，将提取出的简历文本（外部用户提交的内容）纳入后续AI打分与评价，从而构成对外部作者自由文本的运行时摄取路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata