verify
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the local command
resume-builder verifyto perform deterministic provenance checks on resume files. This is a functional requirement for the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted resume data, which theoretically presents an indirect prompt injection surface. However, the skill's primary function is to audit this data for errors. Ingestion points:
resume.yaml(argument path) andcorrections.yaml(local project file). Boundary markers: No explicit delimiters are present to separate resume content from potential malicious instructions. Capability inventory: The skill can execute theresume-buildercommand and append data to session logs. Sanitization: No explicit sanitization or filtering of the input file content is performed.
Audit Metadata