The Agent Skills Directory

[PROMPT_INJECTION]: The skill instructions and documentation focus entirely on hiring process design. No patterns typical of prompt injection, such as 'Ignore previous instructions', 'DAN' modes, or safety filter bypasses, were detected.
[DATA_EXFILTRATION]: While the hiring_calibrator.py script processes sensitive demographic data (gender, ethnicity, scores), it does so entirely within the local environment. The scripts do not import network-capable libraries (like requests or urllib), and there are no network operations, hardcoded API keys, or exfiltration patterns detected.
[REMOTE_CODE_EXECUTION]: The skill uses only the Python standard library. There are no patterns involving the download or execution of remote scripts (curl | bash), nor does it depend on external, unverified packages.
[OBFUSCATION]: All code and documentation are provided in clear text. There are no instances of Base64 encoding, zero-width characters, homoglyph attacks, or hidden text patterns intended to conceal malicious logic.
[COMMAND_EXECUTION]: The Python scripts perform data processing and file I/O using standard methods. There is no use of os.system(), subprocess.run(), or eval() on untrusted input that could lead to arbitrary command execution.
[INDIRECT_PROMPT_INJECTION]: The skill ingests interview data via JSON files in hiring_calibrator.py. The ingestion points are strictly validated for schema consistency and numeric ranges. Since the tool lacks network or shell execution capabilities, the risk of data-driven injection attacks is minimal.
[PRIVILEGE_ESCALATION]: The skill does not attempt to use sudo, modify system-level directories, or bypass OS-level security controls. The README correctly suggests standard user-level permissions for execution.
[PERSISTENCE]: The skill does not attempt to create cron jobs, startup items, or modify shell profiles to maintain persistent access to the host system.
[DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file does not contain any dynamic shell execution placeholders (!command``) that would run code at load time.

interview-system-designer