Resume & Cover Letter

• Analyzed: May 12, 2026, 3:58 AM
• Findings: 1
• Version: 1.0.0
• Hash: 26443dfb28a3f66ffeb0f9d377cfd60dfc904ed02541a50a83e47f2fd6d5fb15
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the inclusion of `Bash` in `allowed-tools` and the generation of LaTeX files (`.tex`). While the skill's instructions are benign and focused on resume generation, the `Bash` tool grants powerful arbitrary command execution capabilities, and LaTeX files can be exploited for Remote Code Execution (RCE) via `\write18` if user-provided input is not properly sanitized before being embedded and compiled. These capabilities, without explicit sanitization instructions, create significant vulnerabilities for shell injection or LaTeX RCE, making the skill susceptible to exploitation despite lacking explicit malicious intent in its instructions.