Security audit
Security checks for vulnerabilities and agentic risk
This resume optimization skill is a disclosed two-step writing workflow with no code execution, persistence, credential handling, or hidden data movement in the inspected artifacts.
Install if you want a Chinese-first resume optimizer that coordinates two other skills. Review the final resume carefully, fill all placeholders, and avoid providing sensitive personal details unless you are comfortable sharing them with the dependent resume-assistant and humanizer skills.
The trigger conditions are broad and can activate on generic resume-help requests without clearly signaling the two-step orchestration, sub-skill usage, or required user consent for style transformation. This can cause the skill to take over ordinary requests unexpectedly, route user content through additional skills, and apply changes the user did not explicitly ask for.
The entire markdown file is written as prescriptive Chinese-language guidance, including headings and instructions such as how the assistant should ask users for metrics. There is no indication that language choice is optional or user-selected, which can violate a language/locale policy requiring user opt-in for a specific language.
The entire skill overview is written in Chinese and targets Chinese-speaking users, but it does not state that the skill is region-specific or provide any opt-in or alternative language option. Under the policy, language constraints should either be optional for the user or clearly justified as a locale-specific tool.
The skill directs the agent to add first-person voice as part of de-AI processing, which imposes a stylistic transformation that may not match the user's preferred tone, language norms, or authenticity goals. In a resume context, forced voice changes can misrepresent authorship or alter professional presentation without explicit opt-in.
No suspicious patterns detected.
