The Agent Skills Directory

[SAFE]: The skill performs its stated function of resume generation without any detected malicious activity. It operates locally on the filesystem and follows safe development practices.
[COMMAND_EXECUTION]: The skill uses a Node.js build script (scripts/build.mjs) to render resumes. The script uses standard built-in modules (fs, path, url) to process JSON data and embed it into HTML templates. It correctly sanitizes data before embedding it into the HTML to prevent injection and limits file reading to .json extensions.
[PROMPT_INJECTION]: The instructions provided to the agent in SKILL.md and reference.md are focused entirely on resume creation, layout, and overflow handling. No patterns indicating behavioral overrides, safety bypasses, or instruction-forgetting were found.
[DATA_EXFILTRATION]: There are no network operations (such as curl, fetch, or wget) performed by the skill. All data processing and file operations are conducted within the local workspace environment.
[EXTERNAL_DOWNLOADS]: The skill does not download external packages, scripts, or remote content. All templates and assets are bundled within the skill package.

resume-writer