resume-modern
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a static layout for resume generation. It does not perform any sensitive file access, network exfiltration, or command execution. All external resources, including the upstream repository, are associated with the vendor's known infrastructure or well-known services.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided resume data and interpolates it into an HTML template. While this ingestion represents a theoretical surface for indirect prompt injection, it is a core feature of the skill's purpose and lacks high-privilege capabilities that could be exploited. 1. Ingestion points: User-provided resume content processed via the Modern Resume template. 2. Boundary markers: None explicitly defined, though structural HTML tags act as implicit delimiters. 3. Capability inventory: None. The skill only provides a visual preview and does not invoke subprocesses, file-write, or network tools. 4. Sanitization: None observed; the skill relies on the LLM to provide formatted text for the template.
- [EXTERNAL_DOWNLOADS]: The skill references styling and typography assets from well-known and trusted services, including the Tailwind CSS CDN and Google Fonts.
Audit Metadata