hr-draft-offer

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized commands were detected in the skill's instructions or workflow.
  • [DATA_EXPOSURE]: The skill incorporates explicit security guidelines for handling Personal Identifiable Information (PII). It mandates the use of a PII-masking process via the moai-coworker:ai-slop-reviewer skill and strictly forbids the re-output of unmasked sensitive data such as resident registration numbers, bank accounts, or contact details in the generated document drafts.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted user-provided candidate information to populate templates, the risk of injection is mitigated by the mandatory masking step and the absence of dangerous capabilities like command execution or network exfiltration within the skill's workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:23 PM