generate

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the resume-builder command-line utility to generate multiple document formats (PDF, DOCX, HTML, Markdown) and perform an integrity check via resume-builder verify. These operations are performed directly within the agent's execution environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files, creating a vulnerability surface where malicious content in those files could influence agent behavior.
  • Ingestion points: Data is read from resume.yaml and various template files including templates/pdf_styles.yaml, templates/docx_styles.yaml, templates/resume.html.j2, and templates/style.css as described in SKILL.md.
  • Boundary markers: Absent. The instructions do not define any delimiters or safety markers to isolate the ingested file content from the agent's logic.
  • Capability inventory: The skill possesses command execution capabilities (via resume-builder) and file system access to the project directory as specified in SKILL.md.
  • Sanitization: Absent. There is no mention of validation, filtering, or sanitization of the external file content before it is processed by the rendering engine or reviewed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 09:59 PM