Offer Letter Generator
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary purpose is to provide templates and instructions for HR personnel to generate offer letters. All instructions and examples align with this benign purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted user data by interpolating candidate and job information into document templates. However, the associated risks are negligible due to the restricted scope of the integrated tools.
- Ingestion points: User-provided inputs such as candidate name, job title, and compensation details defined in the 'How to Use' section of SKILL.md.
- Boundary markers: The templates utilize square brackets (e.g.,
[Candidate Name]) as delimiters for variable interpolation. - Capability inventory: The skill uses specific MCP tools (
create_docx,fill_docx_template,docx_to_pdf) for document manipulation, with no access to shell commands, network operations, or sensitive file systems. - Sanitization: No explicit sanitization or instruction-ignoring markers are defined for the interpolated content.
Audit Metadata