Security audit
Security checks for vulnerabilities and agentic risk
This resume-screening skill is coherent, but it asks users to bulk process and rank sensitive candidate data without privacy, consent, retention, or access-control guidance.
Review this carefully before installing. Only use it if you are authorized to process the resumes, can control where candidate data is stored or sent, and have your own privacy, deletion, audit, and human-review practices for hiring decisions.
The natural-language content forces a specific language experience for users, and there is no indication that Chinese is optional or that the skill is intended only for a China-specific audience. Under the policy, language or locale constraints should be opt-in or clearly justified.
The skill explicitly promotes bulk resume parsing, scoring, and ranking, which necessarily involves handling sensitive personal data such as names, education, work history, and potentially contact details. The absence of any privacy notice, consent requirements, retention limits, access controls, or compliance guidance increases the risk of improper collection, over-processing, leakage, or unlawful use of candidate data.
The natural-language description is entirely in Chinese, which indicates a fixed language choice without any visible opt-in, alternative locale, or justification that this skill is region-specific. Under the policy, language constraints should either be optional for users or clearly documented as intentionally locale-bound.
No suspicious patterns detected.
