wps-resume-cn
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
python-docxlibrary from the official Python Package Index (PyPI). - [COMMAND_EXECUTION]: Uses
Bashto install required dependencies viapip. - [PROMPT_INJECTION]: The skill ingests user-provided resume data which could potentially contain indirect instructions.
- Ingestion points: Personal and professional details provided by users in
SKILL.md. - Boundary markers: No explicit markers are used to isolate user content within the script generation or document structure.
- Capability inventory: The skill utilizes
Bash,Write, andEdittools. - Sanitization: User inputs are used directly without sanitization or validation.
Audit Metadata