interview-coach
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill refers to an external package and implementation repository located at
https://github.com/dbhat93/job-search-os. It encourages the installation of a 23-command implementation from this community source, which is not part of the skill's local code base. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, including resume text and interview transcripts from third-party tools.
- Ingestion points: The
analyzecommand andkickoffcommand ingest raw transcript and resume text respectively (SKILL.md). - Boundary markers: The instructions do not define boundary markers or delimiters for the external text, nor do they include instructions to ignore embedded commands within those files.
- Capability inventory: The skill manages personal job search state in
coaching_state.mdand provides career coaching outputs based on the analyzed data. - Sanitization: There is no mention of sanitization, filtering, or validation for the content of the transcripts or resumes before they are processed by the agent.
Audit Metadata