tailored-resume-generator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted content including job descriptions and candidate resumes, which creates a surface for indirect prompt injection attacks.
- Ingestion points: Job descriptions and resume content are ingested via user prompts as described in the 'How to Use' and 'Instructions' sections of SKILL.md.
- Boundary markers: The skill instructions do not prescribe the use of specific delimiters or 'ignore' directives to isolate the external data from the agent's core instructions.
- Capability inventory: The skill is limited to text generation and lacks capabilities for network access, file system modification, or command execution, limiting the potential impact of an injection.
- Sanitization: There are no defined processes for sanitizing, filtering, or validating the input data before processing.
- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any executable scripts, binary files, or external package dependencies.
Audit Metadata