apply-cv-builder
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions to avoid asserting general national conventions regarding personal data like photos unless explicitly required by an application call. This is a measure to prevent the dissemination of potentially biased or incorrect information and does not attempt to conceal malicious activity or override the agent's core instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied resumes and CVs, creating an ingestion point for untrusted data. However, the risk is negligible as the skill lacks access to any dangerous capabilities.
- Ingestion points: User-provided resume/CV text (SKILL.md, Workflow Step 1).
- Boundary markers: None present.
- Capability inventory: No file writes, network operations, or shell command executions are available to the skill.
- Sanitization: No explicit sanitization of input data is performed.
- [COMMAND_EXECUTION]: No shell commands, subprocess calls, or scripts are present within the skill's instructions or reference materials.
Audit Metadata