tailor
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the resume-builder CLI tool to perform verification and generation of resume files. It also calls internal sub-skills like /match and /score.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted job description data which could contain malicious instructions.
- Ingestion points: The job description text or file path provided in the argument hint.
- Boundary markers: No explicit delimiters are used to separate user-provided job data from the skill's instructions.
- Capability inventory: The skill has file-writing capabilities to the knowledge/sessions/ path and can execute CLI commands.
- Sanitization: No input sanitization is mentioned; the skill relies on logic-based 'Anti-Fabrication Rules'.
Audit Metadata