agent-resume

SUSPICIOUS. The skill’s purpose and capabilities mostly align, but it outsources core processing to a third-party `resumy` CLI with unclear same-publisher trust and a possible docs/interface mismatch. No clear credential theft or malicious exfiltration is present, yet the dependency and sensitive personal-data handling make the skill medium risk.