resume-asset-coach
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through external work evidence. 1. Ingestion points: The workflow involves reading 'repo, docs, changelog, PRs, release notes, or user notes'. 2. Boundary markers: The skill does not define delimiters to separate untrusted data from instructions. 3. Capability inventory: The agent reads files and writes text assets, a process that can be manipulated by malicious input content. 4. Sanitization: There is no mention of sanitizing or filtering external content.
Audit Metadata