career-portfolio
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied project descriptions and experience records to generate formatted portfolios. This represents an ingestion surface for untrusted content that could contain embedded instructions.
- Ingestion points: User-provided project descriptions and career history strings in SKILL.md.
- Boundary markers: Absent; user input is interpolated into the workflow without explicit delimiters or safety warnings.
- Capability inventory: The skill performs text generation and calls a sequential thinking reasoning tool (mcp__sequential-thinking__sequentialthinking).
- Sanitization: No input sanitization, escaping, or schema validation is applied to the user-provided data.- [SAFE]: All identified external references target well-known platforms (GitHub, Behance, Notion, Vercel, LinkedIn) for their intended purposes in portfolio hosting. No malicious command execution, data exfiltration, or obfuscation techniques were identified within the skill's files.
Audit Metadata