resume-modern
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Tailwind CSS framework from
cdn.tailwindcss.comand typography fromfonts.googleapis.com. Both are well-known services used for front-end development and do not present a security risk in this context. - [PROMPT_INJECTION]: The skill processes user-provided resume content (Category 8: Indirect Prompt Injection surface).
- Ingestion points: User-supplied resume text is interpolated into the HTML template.
- Boundary markers: The skill uses a specific template structure but lacks explicit delimiters to separate user data from instructions.
- Capability inventory: The skill is limited to HTML rendering and style application.
- Sanitization: No explicit sanitization or filtering is visible in the skill instructions; however, the impact is limited to the visual rendering of the resume document.
Audit Metadata