Global Resume Builder

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:33 PM UTC
• Version:
  1.0.0

Overview

This is a resume-building instruction file with no executable code, hidden access, or unusual permissions.

Before installing, be aware that resumes contain personal data. Provide only the details needed, review generated claims for accuracy, and specify the target country or employer expectations so the format matches the application.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The skill description states it should be used when an English/American style resume is needed and emphasizes global resume generation, but it does not clearly require the agent to confirm the user's target market or preference before applying that style. This can cause the agent to override user intent, produce culturally inappropriate application materials, or mishandle region-specific norms, which is a quality and compliance risk in a hiring context.

VirusTotal

65/65 vendors flagged this skill as clean.