job-search-strategist
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data from job postings, news articles, and web research sources (e.g., Glassdoor, LinkedIn). While this is core to its functionality as a job search strategist, the instructions lack explicit boundary markers or directives to treat external content as untrusted, creating a potential surface for indirect prompt injection if an attacker-controlled source contains malicious instructions.
- Ingestion points: Phase 1 research strategy (SKILL.md) gathers data from job postings and external web searches.
- Boundary markers: Absent. The instructions do not provide delimiters or 'ignore embedded instructions' warnings when processing external data.
- Capability inventory: The agent uses web search and fetch tools to ingest data, which is then used to generate scores and strategies.
- Sanitization: Absent. The skill does not specify validation or filtering of the ingested content.
Audit Metadata