py/ai-job-search
1
0
Fork 0
mirror of https://github.com/MadsLorentzen/ai-job-search.git synced 2026-09-17 00:26:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

security: treat job postings as untrusted input across /apply and /rank (#175)

Browse Source 
Prompt-injection hardening from the dataflow analysis in #173 by @Defaultuser361: data-not-instructions rules in /apply and /rank, reviewer research constrained to the user-confirmed company identity, writing-style verify rule tightened to independently located sources (framework_version 1.1.0), SECURITY.md private reporting channel, README note. Closes #173.
This commit is contained in:
Mads Lorentzen
2026-07-17 21:48:59 +02:00
committed by GitHub
parent ac6a734e16
commit fb91be7a0b
6 changed files with 37 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2
View File
@@ -131,6 +131,8 @@ If the URL can't be fetched (some job portals block automated access), you can p
This runs the full workflow: evaluate fit, draft CV + cover letter, review with a second agent, revise, and present the final output.
Postings are treated as untrusted input (the workflow follows no instructions embedded in them and fetches no links from their body), but agentic defenses are instruction-level, not a sandbox - on an unfamiliar job board, skim what was fetched and written before you hit send. Details in [SECURITY.md](SECURITY.md).
## Other commands
`/setup`, `/scrape`, and `/apply` form the core workflow. Nine more commands extend it once your profile is in place: