The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute rendercv render cv.yaml. This is the standard operational command for the documented purpose of the skill and does not involve elevated privileges or suspicious arguments.
[EXTERNAL_DOWNLOADS]: The skill documentation mentions pip install rendercv. This refers to a legitimate, well-known resume generation library on the official Python Package Index (PyPI). It is a standard dependency for the skill's functionality.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided career data (experience, education, summary) to populate a YAML file. While this data is eventually rendered into a PDF, the skill lacks high-risk capabilities like network exfiltration or system administration, and the data is used in a structured YAML format which limits the risk of instruction leakage during the rendering process.
[SAFE]: The skill follows best practices for CV generation, such as reverse-chronological ordering and quantifiable achievements, and does not exhibit any signs of obfuscation, persistence, or credential harvesting.

cv-builder