ai-dev-interview-simulator
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data, including resume text and job descriptions, to dynamically personalize the interview content. This creates an attack surface where malicious instructions in a resume could attempt to influence the agent's assessment logic.\n
- Ingestion points: Resumes, job descriptions, and file paths provided by the user in SKILL.md.\n
- Boundary markers: The skill lacks explicit delimiters to separate user data from system instructions.\n
- Capability inventory: The skill uses file-reading tools to process PDF resumes.\n
- Sanitization: No specific input validation or sanitization is implemented for the external text.\n- [COMMAND_EXECUTION]: The skill instructs the agent to use file-reading tools to process documents at paths provided by the user. While intended for processing resumes, this could be misused if an attacker provides paths to sensitive system files.
Audit Metadata