Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Persian resume generator that uses local scripts to create and validate user-requested PDF or DOCX resumes without hidden persistence, credential access, or network execution.
Install this when you specifically want Persian/RTL resume generation. Expect it to process resume data from local JSON and create or validate local PDF/DOCX files; review generated resumes for factual accuracy because the skill instructs the agent not to invent missing career details but cannot independently verify them.
The declared purpose emphasizes resume generation, but the content also directs validation of generated files and inspection of resume data, implying filesystem access and auditing behavior not clearly disclosed in the metadata. This mismatch can cause the skill to be invoked in contexts where users or orchestrators do not expect file inspection, increasing the chance of over-broad data access or unsafe routing.
YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).
---
name: persian-resume
description: >-
Generate professional Persian (RTL) resumes/CVs that render correctly with mixed
Persian-English content. Use this skill whenever the user asks to create,
rewrite, polish, or transform a Persian resume/CV, or when a resume contains
mixed Persian and English/technical content that must remain readable and
correctly ordered in RTL. Also trigger when the user provides career info in
any language and wants a professional Persian CV, or asks to fix RTL/bidi
issues in a Persian resume. This skill is NOT for general Persian documents —
use persian-documents for repor
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
{
"name": "علی احمدی",
"title": "توسعهدهنده Full-Stack",
"email": "ali@example.com",
"phone": "+98 912 123 4567",
"location": "تهران، ایران",
YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).
in ["website", "github", "linkedin", "portfolio"]:
if c.get(fld):
contact.append(c[fld])
if contact:
self._para(" | ".join(contact), size=9, alignment="center")
if target:
self._para(f"هدف شغلی: {target}", size=10, alignment="center", italic=True)
if c.get("summary"):
self._heading("خلاصه حرفهای", level=2)
self._para(c["summary"])
# Sections in priority order
order = {"experience": 0, "project": 1, "education": 2,
"skills": 3, "certification": 4, "language": 5,
"award": 6, "publication": 7, "achievement": 8}
sections = sorted(data.get("sections", []),
key=lambda s: order.get(s.get("type", ""), 99))
for sec in sections:
stype = sec.get("type", "")
title = sec.get("title", "")
items = sec.get("items", [])
categories = sec.get("
Without declared permissions the skill's intent is opaque and cannot be validated.
The manifest description instructs the skill to generate a professional Persian CV whenever the user wants resume help in several broad situations, including when the user provides career info in any language. This imposes a specific language/locale outcome by default rather than clearly requiring the user to opt into Persian output.
This markdown file uses Persian sample content throughout and the options restrict calendar to persian or gregorian while fonts are limited to Persian-oriented choices. Because the schema does not explicitly offer a general language choice or explain that the skill is intentionally region-specific, it can be read as forcing a specific language/locale without user opt-in.
This markdown file contains natural-language requirements that mandate a specific locale and script presentation, including a Persian font and RTL layout. Under the policy, forcing a specific language or locale without user opt-in is a natural-language policy violation unless clearly documented as a justified region-specific tool.
The module docstring and generated document settings explicitly define the resume as Persian and RTL, and the CLI description repeats that fixed locale. The policy allows locale constraints only when clearly documented and justified or when the user is offered a choice; this file does not provide an opt-in or configurable language selection.
The module docstring and usage describe the tool as validating only a generated Persian resume, which is a natural-language locale constraint. Under the policy, forcing a specific language or locale without user opt-in or a clearly documented justification should be flagged.
This is a manifest-like JSON file, so vague trigger review applies. The phrase identifies the skill by name but does not specify activation scope, constraints, or negative examples, which could make invocation matching overly broad in systems that rely on natural-language descriptions.
No suspicious patterns detected.