cover-letter
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from users (job descriptions and personal experience) to generate output. Ingestion points: User input as described in the 'How to Use' section of SKILL.md. Boundary markers: None explicitly defined to separate user data from instructions in the prompt construction. Capability inventory: Utilizes MCP tools
create_docxanddocx_to_pdfto generate files. Sanitization: No explicit sanitization or validation of the input data is performed.
Audit Metadata