Skip to main content

cv-builder

Enables users to create professional resumes and CVs with customizable templates and a permanent online presence, all via a free API.

Install this skill

or
61/100

Security score

The cv-builder skill was audited on Mar 4, 2026 and we found 27 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 57

Webhook reference - potential data exfiltration

SourceSKILL.md
57| Callback webhook | Yes | `"hitl_callback_url"` |
medium line 86

Webhook reference - potential data exfiltration

SourceSKILL.md
86An **Access-ID** (`talent_agent_[a-z0-9]{4}`) is optional for CV Builder — basic use (3 CVs/day per IP) works without one. Register for higher limits (50 CVs/day) and callback webhook support:
medium line 95

Webhook reference - potential data exfiltration

SourceSKILL.md
95The Access-ID is also the HMAC secret for verifying `X-HITL-Signature` on callback webhooks. Store in `TALENT_ACCESS_ID` — do not hardcode.
low line 19

Unicode escape sequences

SourceSKILL.md
19emoji: "\U0001F4C4"
low line 9

External URL reference

SourceSKILL.md
9homepage: https://www.talent.de
low line 23

External URL reference

SourceSKILL.md
23api_base: https://www.talent.de/api
low line 37

External URL reference

SourceSKILL.md
37review_base_url: "https://www.talent.de/en/hitl/review"
low line 40

External URL reference

SourceSKILL.md
40discovery: "https://www.talent.de/.well-known/hitl.json"
low line 62

External URL reference

SourceSKILL.md
62Full catalog: [reference/templates.md](reference/templates.md) — live previews: [talent.de/de/cv-template-ideas](https://www.talent.de/de/cv-template-ideas)
low line 89

External URL reference

SourceSKILL.md
89POST https://www.talent.de/api/agent/register
low line 123

External URL reference

SourceSKILL.md
123POST https://www.talent.de/api/agent/cv-simple
low line 153

External URL reference

SourceSKILL.md
153"review_url": "https://www.talent.de/en/hitl/review/review_a7f3b2c8d9e1f0g4?token=abc123...",
low line 154

External URL reference

SourceSKILL.md
154"poll_url": "https://www.talent.de/api/hitl/cases/review_a7f3b2c8d9e1f0g4/status",
low line 187

External URL reference

SourceSKILL.md
187POST https://www.talent.de/api/agent/cv-simple
low line 224

External URL reference

SourceSKILL.md
224POST https://www.talent.de/api/agent/cv-simple
low line 236

External URL reference

SourceSKILL.md
236"url": "https://www.talent.de/dev/alex-johnson",
low line 247

External URL reference

SourceSKILL.md
247> 1. **CV URL**: `https://www.talent.de/dev/alex-johnson` — their live profile
low line 248

External URL reference

SourceSKILL.md
248> 2. **Claim link**: `https://www.talent.de/claim/claim_xyz789` — to take ownership and edit
low line 329

External URL reference

SourceSKILL.md
329POST https://www.talent.de/api/agent/cv-simple
low line 347

External URL reference

SourceSKILL.md
347"url": "https://www.talent.de/pro/alex-johnson",
low line 389

External URL reference

SourceSKILL.md
389POST https://www.talent.de/api/agent/cv-simple
low line 410

External URL reference

SourceSKILL.md
410"url": "https://www.talent.de/pro/alex-johnson",
low line 425

External URL reference

SourceSKILL.md
425POST https://www.talent.de/api/agent/cv/pdf
low line 493

External URL reference

SourceSKILL.md
493- [agent.json](https://www.talent.de/.well-known/agent.json)
low line 494

External URL reference

SourceSKILL.md
494- [hitl.json](https://www.talent.de/.well-known/hitl.json)
low line 495

External URL reference

SourceSKILL.md
495- [llms.txt](https://www.talent.de/llms.txt)
low line 496

External URL reference

SourceSKILL.md
496- [ClawHub](https://www.clawhub.ai/rotorstar/id-cv-resume-creator)
Scanned on Mar 4, 2026
View Security Dashboard
Installation guide →