Security audit

Resume Optimizer

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language resume optimizer with user-directed PDF parsing and no hidden code, persistence, or external data movement found.

Install only if you are comfortable uploading a resume for analysis in this environment. Redact unnecessary sensitive identifiers first, specify your preferred output language if needed, and verify that every employer, date, metric, award, and achievement in the final resume is factually yours.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (9)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The README instructs users to upload and parse PDF resumes, which commonly contain sensitive personal data such as names, contact details, employment history, and education, but it does not disclose that such data will be processed. This creates a privacy and informed-consent gap: users may provide sensitive documents without understanding the data handling implications, increasing compliance and trust risks.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill content is written to require Chinese output and formatting without offering the user a language choice or opt-in, which can cause unintended disclosure or mishandling if the user expects another language or needs exact-language preservation for resume content. In a resume-processing context, forced language transformation can also degrade accuracy, alter nuance, or expose personal information in an unexpected form when handling sensitive employment documents.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill is explicitly designed to process uploaded resumes and PDFs, which commonly contain sensitive personal data such as names, phone numbers, email addresses, addresses, employment history, and sometimes government identifiers. Omitting a user warning or handling guidance increases the risk of users sharing sensitive data without informed consent and can lead to over-collection, unnecessary retention, or unsafe downstream exposure in logs or outputs.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This template file contains specific company names, roles, achievements, metrics, awards, and publication claims that are clearly illustrative rather than user-sourced facts. In a resume-optimization skill that explicitly promises 'no fabrication' and 'factual enhancement only,' these examples create a strong risk that downstream generation will copy or adapt invented credentials into a user's resume, causing misrepresentation, fraud, or reputational harm.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown guide presents all instructions and examples only in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language, which may conflict with an organizational policy requiring language choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The natural-language content in the README is entirely in Chinese, including the title, description, and usage instructions, with no indication that users may interact in another language or choose a preferred locale. Under the policy criteria, forcing a specific language without opt-in can be a natural-language policy violation unless the locale constraint is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the user can choose another language or that the locale is intentionally constrained. Under the language/locale policy, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and examples exclusively in Chinese, with no opt-in, alternative language, or justification that the skill is region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains only Chinese-language content and does not provide any opt-in, alternative language, or justification for enforcing a single language. Under the policy rule for natural-language violations, forcing a specific language without user choice can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.