cn-tech-interview-drill
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided data, such as technology stacks, project descriptions from a CV, and target job roles, to generate interview questions and plans. While this represents an attack surface for indirect prompt injection (where a user might provide malicious instructions within a project description), the skill lacks any computational tools, file system access, or network capabilities that could be leveraged for exploitation. The risk is minimized by the absence of executable functionality.
- [SAFE]: The skill consists entirely of natural language instructions. There are no shell commands, scripts, remote downloads, or obfuscated content. The instructions do not attempt to bypass safety guidelines or gain unauthorized persistence.
Audit Metadata