resume-builder

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands via powershell, node, and npx to execute validation and rendering workflows. These operations are restricted to the skill's utility scripts and the author's specific packages.
  • [EXTERNAL_DOWNLOADS]: The skill downloads and executes the author's utility package @chasen-liao/resume-skills and the well-known playwright service to provide PDF rendering and Canvas editing capabilities.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied resume content which is then passed to validation and rendering tools. The processing is handled through standard parsing libraries (html.parser and pypdf), and is consistent with the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 12:54 PM
Security Audit — agent-trust-hub — resume-builder