partnerships-hiring

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill generates hiring artifacts by processing user responses to an interactive 10-question interview, creating a surface for potential instruction injection by malicious users.
  • Ingestion points: User answers provided during the interview workflow defined in SKILL.md.
  • Boundary markers: Absent; there are no instructions to use delimiters or to treat user responses as data rather than instructions.
  • Capability inventory: The skill produces text-based artifacts (scorecards, loops, sourcing plans). It does not contain capabilities for arbitrary command execution, network exfiltration of sensitive files, or file system modifications.
  • Sanitization: Absent; the skill does not perform validation or filtering on user-provided responses before interpolation into final documents.
  • [PERSISTENCE]: The skill includes instructions to store generated artifacts in 'persistent memory' for reuse in future hiring cycles. This is a legitimate platform feature for state management and does not constitute a malicious persistence attack vector (e.g., shell profiles or registry modifications).
  • [EXTERNAL_DOWNLOADS]: The skill references accessing industry-specific resources like the 'Partnership Leaders' compensation database and job boards for live data. These are established, well-known services for the partnerships field, and their use is safe and relevant to the skill's primary functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 09:17 PM
Security Audit — agent-trust-hub — partnerships-hiring