job-seeker-helper
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within the local environment using standard Python libraries. No network connections, external downloads, or suspicious persistence mechanisms were found.\n- [PROMPT_INJECTION]: The skill processes untrusted external data, which constitutes an indirect prompt injection surface.\n
- Ingestion points: User-provided resume/CV and job descriptions in 'SKILL.md' and 'keyword_audit.py'.\n
- Boundary markers: Absent.\n
- Capability inventory: Local file writes via 'job_tracker.py' and 'packet_builder.py'.\n
- Sanitization: Absent; scripts perform text normalization but no security sanitization.\n- [COMMAND_EXECUTION]: Helper scripts process files based on command-line arguments. These operations follow standard programming practices and do not use unsafe execution methods like 'eval' or 'shell=True'.
Audit Metadata