career-companion
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute curl commands for fetching job data from the zerogtalent.com API. These commands are consistent with the skill's purpose as described in the documentation.\n- [EXTERNAL_DOWNLOADS]: Fetches remote job listings, company data, and salary information from zerogtalent.com, which is the platform's official data source for this skill.\n- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks due to its processing of external job descriptions and user-supplied resumes.\n
- Ingestion points: Job descriptions fetched from external URLs via curl and resumes provided directly by the user in the conversation.\n
- Boundary markers: The skill specifies output templates for job listings but does not include explicit delimiters or instructions to ignore commands within the ingested job description data.\n
- Capability inventory: The skill has access to the Bash tool (for curl operations) and various MCP tools for querying the Zero G Talent database.\n
- Sanitization: There is no explicit description of sanitization or filtering of the content retrieved from job descriptions before it is used to generate resume suggestions or interview questions.
Audit Metadata