resume-tailor Audit report.

Warnings

• Permission surface may require sandboxing
• The skill depends on external runtime files (installation-mode.md, voice-contract.md) that are not included in the repository, but this is expected for the OfferLoop platform.
• The render_resume.py script is only partially shown; the full implementation is not visible for review, but the visible parts appear safe and well-structured.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 13 GitHub stars
• Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.