Job Hunter

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 14, 2026, 11:57 AM
• Findings: 0
• Version: 0.1.0

Overview

The skill's code and instructions match its stated purpose (scrape LinkedIn guest pages, score jobs, and notify via a Telegram bot); it requests no unrelated credentials or installs and contains no hidden endpoints or obfuscated behavior.

This package appears to do what it says: scrape LinkedIn guest pages, score jobs, and send Telegram notifications. Before installing or running: (1) review and protect config.json because it will contain your Telegram bot token and personal PII — consider using environment variables or a secrets store instead of a plaintext file; (2) run the code in an isolated account or container and ensure file permissions on the project directory are restrictive; (3) be aware LinkedIn scraping may be brittle and could violate LinkedIn's Terms of Service; (4) the scripts only contact linkedin.com and api.telegram.org — if you see other network activity after running, stop and inspect; (5) use a single bot instance (SKILL.md notes 409 conflicts) and monitor logs; (6) if you need higher assurance, run a static review or dynamic sandbox of the scripts before giving them network access.