Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent interview-coaching skill, but users should share only redacted resume or experience details.
Safe to install for PM interview preparation. Before using it, remove or mask phone numbers, email addresses, home addresses, government ID numbers, exact compensation, and any unrelated private information from your resume or examples.
The skill hard-codes Chinese as the interaction language without asking for user preference or offering an alternative. This can exclude or confuse users and may cause them to disclose sensitive information without fully understanding the prompt, but it is not directly a code-execution or account-compromise issue.
The skill asks the user to provide a resume, which commonly contains sensitive personal data such as phone number, email, work history, education, and sometimes government identifiers, but gives no privacy warning or minimization guidance. In a job-coaching context this increases the likelihood of unnecessary exposure of personal data to the system or downstream tools.
The initialization message proactively invites users to send their resume immediately, again without any notice about sensitive personal information or data minimization. Because this is the first interaction, users are especially likely to overshare complete documents before understanding privacy risks, making the prompt more dangerous in context.
No suspicious patterns detected.
