resume-modern
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The template fetches styling and typography resources from well-known services.
- Loads the Tailwind CSS library from
cdn.tailwindcss.com. - Fetches font files from Google Fonts (
fonts.googleapis.com). - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it transforms untrusted user data into a visual format.
- Ingestion points: The agent accepts user-supplied text (personal details, work history, education) to populate the template fields defined in
SKILL.md. - Boundary markers: The prompt template does not specify explicit delimiters or 'ignore' instructions for the interpolated data.
- Capability inventory: The skill does not possess dangerous capabilities; it is limited to generating HTML for display purposes and has no access to the file system, network (beyond assets), or shell execution.
- Sanitization: No specific filtering or sanitization of user-provided content is indicated before it is rendered into the HTML structure.
Audit Metadata