analyze-resume
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted resume data (PDF or text) which constitutes a surface for indirect prompt injection attacks.
- Ingestion points: Phase 0 uses the Read tool to ingest user-provided resume file paths.
- Boundary markers: The instructions lack explicit boundary markers or warnings to disregard instructions potentially embedded within the resume content.
- Capability inventory: The skill is limited to reading file content and providing structured analysis; it does not utilize file-write or network-exfiltration capabilities.
- Sanitization: No sanitization or filtering is performed on the text extracted from the resume files before it is analyzed by the model.
Audit Metadata