resume-builder
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (job descriptions and resume inputs), which allows for potential indirect prompt injection attacks. \n- Ingestion points: Job descriptions and user-supplied resume text mentioned in SKILL.md. \n- Boundary markers: No delimiters or instructions are used to isolate user data. \n- Capability inventory: No tools or command execution capabilities are defined within the skill. \n- Sanitization: No validation or sanitization of input data is defined. \n- [METADATA_POISONING]: The
authorfield is defined asClaude Code, while the skill is attributed toinbharataiin the collection link, which is misleading metadata.
Audit Metadata