Resume/CV Creator
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface in its resume tailoring workflow.
- Ingestion points: The
tailorResumeForJobfunction (SKILL.md) accepts an untrustedjobDescriptionstring as input. - Boundary markers: The implementation lacks delimiters or instructions for the agent to ignore potentially malicious commands embedded within the job description text.
- Capability inventory: The skill has file system write capabilities (
fs.writeFileSync) across multiple workflows to save resumes in various formats. - Sanitization: While the code filters for word length and commonality during keyword extraction, it does not perform security-focused sanitization to prevent the injection of malicious instructions into the generated resume's summary or achievement sections.
Audit Metadata