resume-optimizer
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a passive analysis tool, reading codebase files and producing a markdown report. It does not perform network operations or execute arbitrary shell commands.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from the analyzed codebase and user-supplied arguments. 1. Ingestion points: Target codebase files (package manifests, source code) and $ARGUMENTS variable. 2. Boundary markers: Not explicitly defined for ingested content. 3. Capability inventory: Local file system read access; local file system write access (docs/ directory and telemetry logging). 4. Sanitization: Not explicitly implemented for extracted content, though the skill is instructed to avoid specific data types (PII) in its output.
Audit Metadata