resume-skill-extraction

Warn

Audited by Snyk on Aug 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). ResumeSkillExtraction ingests outsider-authored resume_text/resume_content fields and downloaded resume attachment content from ServiceNow candidate records (sn_hr_tm_candidate/resume_text/resume_content and sys_attachment -> /api/now/attachment/{attachment_sys_id}/file) when it parses “Step 6: Extract and Categorize Skills from Resume.”

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 3, 2026, 02:24 PM
Issues
1
Security Audit — snyk — resume-skill-extraction