resume-builder
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to handle document conversion and quality verification.
- Evidence: The instructions direct the agent to run
python scripts/office/soffice.py --headless --convert-to pdf resume.docxfor PDF generation andpdftotext resume.pdf -andpdfinfo resume.pdffor verification. - Context: These operations are limited to the skill's specific purpose of building and delivering resume documents.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection due to its document processing workflow.
- Ingestion points: User-provided work history, technical skills, and project details (SKILL.md).
- Boundary markers: Absent; the skill does not use specific delimiters when interpolating user data into the document or reading it back.
- Capability inventory: Access to the
docxskill for document creation and shell execution for PDF processing (SKILL.md). - Sanitization: None; the skill assumes the provided work history is valid and focuses on formatting and impact writing.
Audit Metadata