skills/ethan-rio/skills/cover-letter/Gen Agent Trust Hub

cover-letter

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from users (job descriptions and personal experience) to generate output. Ingestion points: User input as described in the 'How to Use' section of SKILL.md. Boundary markers: None explicitly defined to separate user data from instructions in the prompt construction. Capability inventory: Utilizes MCP tools create_docx and docx_to_pdf to generate files. Sanitization: No explicit sanitization or validation of the input data is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 10:56 AM
Security Audit — agent-trust-hub — cover-letter