career-coach

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface.
  • Ingestion points: The skill uses the Read tool to ingest user-provided resumes and professional materials in Phase 1 (SKILL.md).
  • Boundary markers: The prompt lacks explicit delimiters or specific instructions for the agent to ignore potentially malicious commands embedded within external documents.
  • Capability inventory: The skill utilizes the Read tool to access local files and the Write tool to generate a career-blueprint.md file (SKILL.md).
  • Sanitization: No sanitization or content validation is performed on the ingested file data.
  • [COMMAND_EXECUTION]: File System Interaction.
  • The skill uses the Write tool to create and modify the career-blueprint.md file in the working directory (SKILL.md).
  • [EXTERNAL_DOWNLOADS]: References to External Resources.
  • The documentation provides instructions for installation via npx from the author's repository and references a related web application hosted on Vercel (README.md). These are standard vendor resources or well-known services.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 05:13 PM