resume-craft
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted text provided by users (resumes and job descriptions), which could contain malicious instructions designed to subvert the agent's logic.\n
- Ingestion points: SKILL.md Phase 1 instructs the agent to collect resume content and JD text.\n
- Boundary markers: No specific boundary markers or instruction-ignoring warnings are implemented for the ingested text.\n
- Capability inventory: The skill focus is text analysis and generation; it does not request tools for network access or shell execution.\n
- Sanitization: The SOP does not include validation or sanitization of the provided resume or JD content.
Audit Metadata