resume-builder
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands via
powershell,node, andnpxto execute validation and rendering workflows. These operations are restricted to the skill's utility scripts and the author's specific packages. - [EXTERNAL_DOWNLOADS]: The skill downloads and executes the author's utility package
@chasen-liao/resume-skillsand the well-knownplaywrightservice to provide PDF rendering and Canvas editing capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied resume content which is then passed to validation and rendering tools. The processing is handled through standard parsing libraries (
html.parserandpypdf), and is consistent with the skill's primary purpose.
Audit Metadata