Skills
Navigate
skills/sundial-org/awesome-openclaw-skills/resume-optimizer/Gen Agent Trust Hub

resume-optimizer

Warn

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/generate_resume_pdf.py contains logic to automatically install the reportlab library from the public Python Package Index (PyPI) if it is not already available in the environment.
  • [COMMAND_EXECUTION]: The skill executes shell-level commands using subprocess.check_call in scripts/generate_resume_pdf.py to perform package installation.
  • [REMOTE_CODE_EXECUTION]: The dynamic installation of unpinned external packages at runtime allows for the potential execution of remote code.
  • [PROMPT_INJECTION]: The skill analyzes and modifies user-provided resume content and job descriptions, which are untrusted data sources. Ingestion points: Workflows in SKILL.md process user-provided resumes and job descriptions. Boundary markers: No delimiters or protective instructions are used when interpolating user data. Capability inventory: The skill has command execution capabilities through the subprocess module. Sanitization: No sanitization or validation of the input data is performed before processing.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 15, 2026, 10:36 AM
Security Audit — agent-trust-hub — resume-optimizer