Security audit
Candidate Skills Mapper
Security checks for vulnerabilities and agentic risk
Overview
This skill only turns user-supplied candidate and role information into an interview plan, with no file access, credentials, persistence, or executable behavior.
This appears appropriate for routine recruiting workflow assistance. Candidate profiles can contain personal or sensitive HR information, so users should provide only the candidate and role details needed for interview planning and avoid unnecessary private data.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.