xy-resume
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill loads session data from local markdown files and presents it to the agent without sanitization.
- Ingestion points: Local markdown files stored in the session directory (e.g., ~/.xy/sessions/) as specified in Step Three of the skill logic.
- Boundary markers: No markers or explicit instructions are provided to the agent to treat the loaded content as potentially untrusted data.
- Capability inventory: The agent utilizes filesystem tools to list directories and read the content of archived session files.
- Sanitization: The instructions explicitly command the agent to display archived content even if the format is incorrect or manually edited, ensuring that no filtering of potentially malicious embedded instructions is performed.
Audit Metadata