talent-acquisition
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected in this skill. The instructions focus on professional business processes for talent acquisition and do not include any executable code, dangerous network operations, or prompt injection patterns. The skill correctly refers to specialized internal tools for legal and compensation tasks rather than attempting to perform them itself.
- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing external data such as candidate applications and resumes. While this creates a theoretical attack surface for indirect prompt injection, the skill does not possess any exploitable capabilities such as file system writes, network exfiltration, or arbitrary command execution that would allow an injection to cause harm.
- Ingestion points: Candidate applications and resumes enter the workflow via the ATS 'New / applied' stage as described in references/ats_pipeline_and_hiring_manager_partnership.md.
- Boundary markers: The instructions do not specify the use of delimiters or warning headers for external content.
- Capability inventory: The skill is purely instructional and does not define any shell commands, subprocesses, or network operations.
- Sanitization: The skill does not mention specific sanitization or filtering steps for candidate-provided data.
Audit Metadata