linkedin-profile-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input by requiring users to paste their LinkedIn profile text and upload screenshots for analysis. This creates a surface for indirect prompt injection where an attacker could embed instructions within their profile to manipulate the agent's behavior.
- Ingestion points: User-provided profile text (headline, About, Experience, Skills) and visual components (screenshots) as described in the 'Input' section of
SKILL.md. - Boundary markers: Absent. The skill does not define specific delimiters or include instructions for the agent to ignore command-like patterns within the analyzed text.
- Capability inventory: The provided files do not include subprocess calls, network operations, or file-writing capabilities; the skill's primary function is generating text-based audits and rewrites.
- Sanitization: Absent. There is no evidence of filtering or sanitizing the input text before it is processed by the agent.
Audit Metadata