bq-skill

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data in the form of Job Descriptions (JDs) and Resumes. This content is used by the agent to generate predicted interview questions and model answers.
  • Ingestion points: The prompts/jd-driven-prep.md file defines steps to upload a JD and a resume for analysis.
  • Boundary markers: The skill relies on natural language instructions to follow specific frameworks like STAR, CAR, and SOAR, which acts as a structural constraint.
  • Capability inventory: The skill is capable of reading files from sibling directories (../job-description-skill/) and writing HTML reports to the user's local Desktop.
  • Sanitization: The instructions do not explicitly detail sanitization methods for the ingested text, relying on the LLM's internal safety filters.
  • [COMMAND_EXECUTION]: The skill instructs the agent to write files to a specific local path (~/Desktop/Claude skills/) to provide the user with a prepared interview report. While this is a documented feature intended for the user, it involves interacting with the local file system based on instructions derived from external data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 12:45 PM