cv
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands via a Makefile to compile resume documents using the xelatex engine.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted job descriptions and user-provided text, creating a potential surface for indirect prompt injection.\n
- Ingestion points: Data is ingested through text input and files in the 'init', 'generate', and 'add' subcommands.\n
- Boundary markers: Content is organized into separate Markdown files, but there are no explicit delimiters or instructions to ignore embedded commands.\n
- Capability inventory: The skill performs file system operations and executes shell commands for document compilation.\n
- Sanitization: No formal sanitization or validation of the input text is implemented.
Audit Metadata