Security audit

粘贴简历，一键优化成HR想看的版本

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only resume editing skill whose privacy and language limitations should be understood, but it does not show hidden execution, persistence, or exfiltration behavior.

Before installing, understand that this skill is intended for Chinese-language resume optimization and may echo or rewrite any personal details included in a pasted resume. Redact unnecessary contact details, IDs, addresses, or other sensitive information if you do not want them processed.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This skill is designed to process resumes, which commonly contain sensitive personal data such as phone numbers, email addresses, employment history, and education details, but the description provides no warning or minimization guidance. Without explicit privacy handling instructions, users may overshare sensitive data and the system may process or retain more personal information than necessary.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The skill description and instructions are written to operate in Chinese and the output template assumes Chinese responses, but there is no opt-in or language choice for users. This can violate language or locale policy when a skill implicitly forces one language without user selection or documented regional justification.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The trigger phrases are broad enough to match ordinary conversation such as asking for someone to 'look at a resume' or 'revise a resume', which can cause the skill to activate unexpectedly. Overbroad activation can route unrelated user content into this skill, increasing the chance of unintended handling of personal data and reducing user control over which capability is invoked.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The file title and all instructional content are written exclusively in Chinese, with no indication that other languages are supported or that the user can opt into this locale. Under the stated policy, forcing a specific language without user choice is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.