apply-profile-reader
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's logic is consistent with its stated purpose of reading and summarizing academic materials. No malicious behaviors, hardcoded credentials, or persistence mechanisms were found.
- [PROMPT_INJECTION]: The skill processes untrusted data (CVs, transcripts, project notes) provided by the user, which presents an indirect prompt injection surface.
- Ingestion points: User-provided documents including CVs, transcripts, research statements, and portfolio links (SKILL.md).
- Boundary markers: None identified; the skill does not use specific delimiters or instructions to ignore embedded directives in the materials.
- Capability inventory: The skill has no capabilities to execute code, perform network requests, or modify the filesystem.
- Sanitization: No input sanitization or validation rules are specified.
Audit Metadata