career-claim-audit
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze untrusted external documents including resumes, portfolios, and interview materials. This creates a potential surface for indirect prompt injection where malicious instructions embedded in a resume could attempt to manipulate the audit results or agent behavior.
- Ingestion points: The skill reads resume files, self-introductions, portfolios, and interview response data provided by the user (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions potentially contained within the processed documents.
- Capability inventory: The skill does not utilize any tools for network communication, shell execution, or persistent storage, which significantly limits the potential impact of an injection attack.
- Sanitization: The instructions do not define any validation or sanitization steps for the data extracted from the documents.
Audit Metadata