generate
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
resume-buildercommand-line utility to generate multiple document formats (PDF, DOCX, HTML, Markdown) and perform an integrity check viaresume-builder verify. These operations are performed directly within the agent's execution environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files, creating a vulnerability surface where malicious content in those files could influence agent behavior.
- Ingestion points: Data is read from
resume.yamland various template files includingtemplates/pdf_styles.yaml,templates/docx_styles.yaml,templates/resume.html.j2, andtemplates/style.cssas described inSKILL.md. - Boundary markers: Absent. The instructions do not define any delimiters or safety markers to isolate the ingested file content from the agent's logic.
- Capability inventory: The skill possesses command execution capabilities (via
resume-builder) and file system access to the project directory as specified inSKILL.md. - Sanitization: Absent. There is no mention of validation, filtering, or sanitization of the external file content before it is processed by the rendering engine or reviewed by the agent.
Audit Metadata