51mee Resume Match

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:19 PM UTC
• Version:
  1.2.1

Overview

This skill is a straightforward resume-to-job matching helper, but it sends resumes and job descriptions to an external 51mee API.

Use this only when you are allowed to share the candidate resume and job description with 51mee. Redact unnecessary personal or confidential information where practical, and review the provider's privacy, retention, and compliance terms before processing sensitive candidate data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 98% confidence
• Finding: The skill sends resume files and job description text to an external third-party API, which likely includes sensitive personal and employment data, but it does not explicitly warn the user that candidate data will leave the platform. In an HR context, resumes commonly contain PII and confidential information, so silent transmission materially increases privacy, compliance, and data-handling risk.

VirusTotal

62/62 vendors flagged this skill as clean.