resume-reviewer
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary purpose is resume analysis and feedback generation. It provides clear, actionable instructions for critiquing documents and generating a review file.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from resumes and job descriptions. While this presents a surface for indirect prompt injection, the instructions include "Honesty guardrails" and requirements to quote the original text, which helps maintain context and reduces the risk of malicious instructions being executed.
- Ingestion points: User-provided resume text, resume files (.docx, .pdf), and job description text.
- Boundary markers: Uses rubric-based scoring and requires specific line-quoting for all feedback, which anchors the AI's output to the source material.
- Capability inventory: Uses a document generation tool (docx-js) to create a report file.
- Sanitization: No explicit sanitization of input text is defined, though the structured rubric approach provides inherent boundaries.
Audit Metadata