resume-creator

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 11:20 AM UTC
• Version: 1.0.1

Overview

This is a coherent resume-building skill that asks for user choices, uses local Markdown references, and does not show hidden execution, persistence, or data exfiltration behavior.

Before installing, be aware that the skill is meant to process personal resume details and may create publishable HTML if you explicitly authorize deployment. Review contact details before making any output public, but the artifact does not show hidden execution or unexpected access.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 49)May include surrounding context.

md

does not request a file or website. Follow the schema workflow below and read [references/schema.md](references/schema.md).

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 135)May include surrounding context.

md

does not request a file or website. Follow the schema workflow below and read [references/schema.md](references/schema.md).

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 201)May include surrounding context.

md

does not request a file or website. Follow the schema workflow below and read [references/schema.md](references/schema.md).

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The trigger list includes broad phrases such as "create a resume," "make a resume," and "improve my resume," which are common user utterances and may cause unintended invocation in general writing-assistance contexts. The README does not provide exclusion conditions or negative examples to clarify when the skill should not activate.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The README states that the skill answers in the language used in the request, automatically mapping Chinese requests to Chinese and English requests to English. This imposes a language behavior without explicit user opt-in, which is a natural-language policy concern unless the user is offered a choice or the constraint is justified as mandatory.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.