resume-modern
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches typography and styling resources from well-known services, including Google Fonts and the Tailwind CSS CDN.
- [PROMPT_INJECTION]: The skill processes untrusted user data to populate the resume template, which is a common surface for indirect prompt injection.
- Ingestion points: User-provided resume details are interpolated into the HTML template as defined in the skill instructions.
- Boundary markers: Absent. The skill does not define specific delimiters to isolate user-supplied text from formatting instructions.
- Capability inventory: The skill is focused on HTML rendering; it does not include dangerous capabilities such as file system writes, shell command execution, or network exfiltration in its scripts.
- Sanitization: No explicit sanitization, escaping, or validation logic for user input is described in the provided files.
Audit Metadata