radar-de-vagas
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Chart.js from a well-known CDN (cdnjs.cloudflare.com) in
assets/radar-export.htmlfor rendering charts. This is a common and safe practice for generating visual data reports. - [COMMAND_EXECUTION]: The skill provides instructions to execute a local Python script (
scripts/render_radar.py) for rendering SVG charts. The script is included in the skill package and uses standard libraries (json, math, argparse) to process data provided via stdin. This is a controlled execution environment and does not involve remote code execution. - [DATA_EXFILTRATION]: The skill instructions explicitly direct the agent to use only public data from the Gupy portal via a dedicated Model Context Protocol (MCP) server. It includes strict rules against inventing data and focuses on comparing public job offerings for the user's benefit.
- [PROMPT_INJECTION]: The instructions contain clear boundaries and 'inegociável' (non-negotiable) rules to prevent the agent from providing career advice beyond its scope, promising employment, or encouraging unethical behavior like lying on a resume.
Audit Metadata