tailor-resume
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external, user-supplied content from job posting web pages.
- Ingestion points: Job details are fetched from arbitrary external URLs in
SKILL.md(Step 1) using browser automation tools. - Boundary markers: Missing explicit delimiters or instructions to prevent the model from executing commands contained within the fetched web page context.
- Capability inventory: The skill has capabilities to read/write files under the
~/.proficiently/directory and use Chrome MCP tools. - Sanitization: No text sanitization or filtering is enforced on the incoming job posting content before processing.
Audit Metadata