profile-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes instructions intended to override the agent's standard operational behavior. Specifically, the 'CRITICAL: Auto-start on load' header and subsequent instructions command the agent to skip summarization and explanation steps, immediately transitioning to task execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions.
- Ingestion points: The skill automatically reads from
about-me.mdif present and accepts user-uploaded files such as LinkedIn profile PDFs and screenshots. - Boundary markers: The instructions lack boundary markers or explicit delimiters to separate the external data from the skill's instructions.
- Capability inventory: The skill generates profile content (headline, about, experience) and image generation prompts based on the ingested data. It does not possess network access or file-writing capabilities.
- Sanitization: There is no evidence of sanitization or filtering applied to the external content before it is used to generate profile copy or design briefs.
Audit Metadata