resume-builder

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to handle document conversion and quality verification.
  • Evidence: The instructions direct the agent to run python scripts/office/soffice.py --headless --convert-to pdf resume.docx for PDF generation and pdftotext resume.pdf - and pdfinfo resume.pdf for verification.
  • Context: These operations are limited to the skill's specific purpose of building and delivering resume documents.
  • [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection due to its document processing workflow.
  • Ingestion points: User-provided work history, technical skills, and project details (SKILL.md).
  • Boundary markers: Absent; the skill does not use specific delimiters when interpolating user data into the document or reading it back.
  • Capability inventory: Access to the docx skill for document creation and shell execution for PDF processing (SKILL.md).
  • Sanitization: None; the skill assumes the provided work history is valid and focuses on formatting and impact writing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 08:06 PM