Security audit
Security checks for vulnerabilities and agentic risk
This resume-building skill is coherent and limited to helping users create Reactive Resume JSON, with ordinary resume privacy considerations for contact details.
Before using it, share only the personal details you actually want included in a resume, and consider placeholders for phone, email, location, or references while drafting.
The skill description is broadly scoped to trigger on generic resume-related requests, which increases the chance it activates in conversations that only tangentially involve resumes. Over-broad activation can cause unintended routing of user interactions and unnecessary collection or processing of personal and career data.
The skill explicitly instructs collection of sensitive personal data such as full name, email, phone number, and location without any privacy notice, minimization guidance, or warning to avoid unnecessary secrets. In an agent setting, this creates avoidable privacy risk because users may disclose personally identifiable information without being informed how much is needed or encouraged to limit exposure.
No suspicious patterns detected.
