Security audit

Resume-analyzer

Security checks for vulnerabilities and agentic risk

Overview

This is a simple Chinese-language resume analysis skill with no code or persistence; privacy and language guidance could be clearer, but the behavior is purpose-aligned.

Before using it, consider removing phone numbers, addresses, IDs, or other unnecessary personal identifiers from the resume text. Expect Chinese-language analysis unless you separately ask your agent to respond in another language.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The skill description is broadly scoped to analyze resumes and provide optimization advice, which can cause over-triggering on common hiring or document-editing requests without clear boundaries. This increases the chance the skill is invoked on sensitive personal data unnecessarily, expanding exposure of resume contents and potentially producing unsolicited transformations of user-provided PII.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The description and all examples are written entirely in Chinese, and the sample inputs/outputs imply the skill operates in Chinese by default, but there is no statement that the skill is China/Chinese-specific or that users may choose another language. This can violate language/locale policy when a skill effectively forces a language without opt-in or justification.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: Resumes commonly contain sensitive personal data such as names, phone numbers, email addresses, employment history, and education records. Omitting a warning or handling guidance encourages users to submit raw PII without minimization, increasing privacy and compliance risk if the data is processed, retained, or shared beyond what the user expects.

Natural-Language Policy Violations

Low

Confidence: 94% confidence
Finding: The only natural-language description of the skill is written entirely in Chinese: "这是一份简历分析助手skills". This indicates a language-specific presentation without any indication that users can choose another language or opt in to Chinese, which matches the locale/language policy concern.

Static analysis

No suspicious patterns detected.