Security audit
Online Resume Creator
Security checks across malware telemetry and agentic risk
Overview
This skill is an offline resume webpage and sharing-asset generator; the main risk is that users may publish personal resume/contact details themselves.
Before installing or using it, review the resume fields carefully and avoid publishing phone numbers, email addresses, salary expectations, or other sensitive details unless you are comfortable with a public link. The built-in expiration check is only a front-end notice, not real access control; use a backend or password gate for sensitive resumes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.