Security audit
Security checks for vulnerabilities and agentic risk
This is a German job-application writing skill with no executable code, persistence, credential access, or hidden data movement found.
Install this if you want German-market application help for FISI or similar IT infrastructure roles. Be mindful that it will ask for personal resume details and may default to German conventions; provide only information you are comfortable sharing and specify another language or locale if needed.
The skill advertises a very broad 'Use when' trigger list including generic terms like Bewerbung, Lebenslauf, CV, and Cover Letter, which can cause the skill to activate in situations beyond the narrowly intended FISI scope. This increases the chance of unintended routing, inappropriate handling of user requests, or overshadowing more suitable skills, especially in multi-skill environments.
Mandating German-only output without user language choice can cause mismatches with user intent, especially if the user provides source material or target job postings in another language. While not a direct security flaw, it is a genuine safety and quality issue because it may lead to incorrect transformations, reduced usability, or accidental disclosure through unnecessary translation steps.
The title and content frame the guidance as mandatory German standards ("Deutsche Bewerbungsstandards") and later prescribe conventions such as photos being usual in Germany and DIN-5008-oriented formatting. Because the document does not explicitly state that these conventions apply only when the user is targeting the German job market or offer locale selection, it can force a locale-specific standard without user opt-in.
The file’s instructions and interview prompts are fully German-language, which effectively forces a specific language/locale for the skill interaction. Under the stated policy, locale constraints should either be optional for the user or clearly documented as justified for a region-specific tool.
The title 'Lebenslauf — Vorlage' indicates the template is intended in German, and the rest of the file consistently enforces German section labels and content conventions. Under the policy, forcing a specific language without user choice can be a natural-language locale violation when no opt-in or alternative is provided.
Line L003 describes the template as a standard structure for a professional German cover letter, which imposes a specific language/locale. Under the policy, locale-specific guidance should either offer user choice or clearly document a justified regional constraint; this file does not do so explicitly.
The file is written as a prescriptive template for a "deutschen Lebenslauf" and presents German-specific conventions as the default format. Because the content does not offer an alternative language/locale choice or explicitly frame itself as an opt-in region-specific template, it can be read as enforcing a specific locale convention.
No suspicious patterns detected.
