cv-builder
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's footprint is coherent with its stated purpose of generating CVs from YAML into themed PDFs using an external rendering tool. It relies on official package registries for its primary tooling, handles PII via CV data, and does not demonstrate evident credential forwarding, remote exfiltration, or autonomous real-world actions. Privacy considerations should be addressed in output handling, and users should be aware that PII in the CV YAML is processed locally unless outputs are transmitted or stored externally.
Confidence: 98%
Audit Metadata