od-prototype-resume-modern
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill captures user input through the
$ARGUMENTSvariable and embeds it into a brief for a design tool. While this constitutes a data ingestion surface, the risk is minimal and inherent to the skill's function. - Ingestion points: User input from the
$ARGUMENTSvariable inSKILL.mdis interpolated into the design brief. - Boundary markers: No explicit boundary markers or "ignore" instructions are used to separate user input from the rest of the brief.
- Capability inventory: The agent is instructed to use its internal file-editing tools and the
open-designMCP server's tools to generate and register files. - Sanitization: There is no explicit sanitization or input validation performed on the
$ARGUMENTSstring.
Audit Metadata