cv-generator
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources that could contain malicious instructions designed to override agent behavior.
- Ingestion points: Content is ingested from LinkedIn profile URLs, user-uploaded LinkedIn PDFs, portfolio/personal website URLs, GitHub profiles, and user-provided job descriptions (detailed-guide.md).
- Boundary markers: The instructions do not provide explicit delimiters or instructions to ignore embedded commands within the ingested data.
- Capability inventory: The skill's capabilities are restricted to text analysis, rewriting, and formatting; it does not have access to shell execution or sensitive system files.
- Sanitization: No sanitization or filtering is specified for the content extracted from external URLs or uploaded files before processing.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch data from external websites to populate CV sections, including LinkedIn, GitHub, and arbitrary personal portfolio URLs provided by the user.
Audit Metadata