resume-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied resumes which could contain hidden instructions aimed at influencing the agent's behavior. \n
- Ingestion points: User-provided resume text provided in the chat context as described in the workflow (Step 1). \n
- Boundary markers: Absent. The instructions do not define clear delimiters or provide the model with explicit directions to treat the resume content strictly as data or to disregard instructions found within the user's text. \n
- Capability inventory: The skill is limited to text generation, diagnosis, and analysis. It does not utilize file system writes, network operations, or subprocess execution, which significantly limits the potential impact of an injection. \n
- Sanitization: No sanitization, validation, or filtering of the input resume content is specified.
Audit Metadata