Job Description Generator
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by processing untrusted user input to generate content for file-writing tools.
- Ingestion points: User-provided job details such as title, responsibilities, and requirements (defined in SKILL.md) are used to construct the final output.
- Boundary markers: The instructions do not define explicit delimiters or 'ignore' commands for the user-supplied data to prevent it from being interpreted as instructions.
- Capability inventory: The skill utilizes the
create_docxandfill_docx_templatetools from theoffice-mcpserver, which allow the agent to write files to the local system. - Sanitization: There is no evidence of input validation, escaping, or filtering of the user-provided content before it is processed by the agent and the associated tools.
Audit Metadata