resume-ats-optimizer
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or remote code execution were detected. The skill consists entirely of natural language instructions and structured evaluation data.
- [DATA_EXFILTRATION]: While the skill is designed to process potentially sensitive personal information (resumes), it does not utilize any tools, network operations, or scripts that could facilitate data exfiltration. The instructions are confined to textual analysis within the agent's context.
- [REMOTE_CODE_EXECUTION]: The skill does not include any scripts, package dependencies (Python or Node.js), or references to external code. There is no mechanism for executing remote or local commands.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it ingests untrusted data from resumes and job descriptions.
- Ingestion points: Full resume and job description text provided by the user in
SKILL.md. - Boundary markers: None explicitly defined to separate instructions from user-provided data.
- Capability inventory: None; the skill does not have access to file-system, network, or subprocess tools.
- Sanitization: No sanitization or filtering of input data is specified. Given the lack of dangerous capabilities, this risk is negligible.
Audit Metadata