ClawHub
Back to skill

Security audit

Resume Generator

Security checks for vulnerabilities and agentic risk

Overview

This is a local resume generator that reads user-provided resume data and writes requested resume outputs without hidden network, credential, or persistence behavior.

Before installing, verify that the PyPI package named in the documentation is the package you intend to trust, or run the included source directly. Treat resume inputs and exported Markdown/HTML/PDF files as personal data, avoid unnecessary sensitive details, and only export or open HTML generated from content you trust.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.