resume-skill-extraction
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). ResumeSkillExtraction ingests outsider-authored resume_text/resume_content fields and downloaded resume attachment content from ServiceNow candidate records (sn_hr_tm_candidate/resume_text/resume_content and sys_attachment -> /api/now/attachment/{attachment_sys_id}/file) when it parses “Step 6: Extract and Categorize Skills from Resume.”
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata