resume-pdf
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to manage files and compile the resume. It uses
mktempto create an isolated working directory,cpto stage assets, and thetypst compilecommand to generate the final PDF from the source template. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface where it ingests untrusted data from job descriptions to tailor the resume summary and skills. While it lacks explicit boundary markers or sanitization for the injected text, the impact is limited to the content of the generated resume and does not grant the data access to sensitive system capabilities.
- [SAFE_PRACTICE]: The use of
/tmp/resume-XXXXXXfor file operations ensures that the skill does not clutter the persistent filesystem or interfere with other files, adhering to the principle of least privilege for file system access.
Audit Metadata