resume-tailor
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires the user to provide the full job description (Step 1 and Tips: "Include the full job description"), so the agent ingests arbitrary public job-posting text from third-party sources and uses it to drive resume edits and recommendations, allowing untrusted content to influence actions.
Audit Metadata