Security audit
Security checks for vulnerabilities and agentic risk
The skill appears aimed at resume PDF generation, but it gives conflicting instructions about whether to use or anonymize sensitive resume details.
Before installing, decide whether this skill should create anonymized sample resumes or real applications. If using real resumes, only provide personal details, company names, project details, education, and metrics you intentionally want included, and keep generated HTML/PDF files local unless you explicitly approve any cloud or database workflow.
The manifest description broadly says the skill can 'generate or optimize resumes' and 'restore skills structure and batch convert to PDF' but does not define specific trigger phrases, activation boundaries, or exclusion conditions. In a manifest file, this ambiguity can cause unintended invocation for general resume-help requests rather than a narrowly scoped formatting task.
The skill instructions and user-facing content are entirely written in Chinese and do not state that the user may choose another language or locale. This creates a natural-language policy risk because the skill appears to impose a specific language by default without documented opt-in or justification.
The skill gives conflicting privacy and data-handling instructions: it first mandates de-identification and forbids real personal, educational, company, project, and quantitative data, then later instructs the agent to build resume sections using the candidate's real information and education background. This inconsistency can cause an agent to disclose sensitive personal data into generated artifacts or intermediate files because the operative rule is unclear.
The skill simultaneously requires strict adherence to real candidate experience and real quantified results while also prohibiting quantitative data and specific company/project details. An agent following both directions may mishandle sensitive resume content, either leaking private metrics/details or unpredictably transforming user data in ways that violate privacy expectations.
No suspicious patterns detected.
