interview-coach

Warn

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill refers to an external package and implementation repository located at https://github.com/dbhat93/job-search-os. It encourages the installation of a 23-command implementation from this community source, which is not part of the skill's local code base.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, including resume text and interview transcripts from third-party tools.
  • Ingestion points: The analyze command and kickoff command ingest raw transcript and resume text respectively (SKILL.md).
  • Boundary markers: The instructions do not define boundary markers or delimiters for the external text, nor do they include instructions to ignore embedded commands within those files.
  • Capability inventory: The skill manages personal job search state in coaching_state.md and provides career coaching outputs based on the analyzed data.
  • Sanitization: There is no mention of sanitization, filtering, or validation for the content of the transcripts or resumes before they are processed by the agent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 23, 2026, 07:07 PM