ClawHub

JobGPT

v1.0.0

Job search automation, auto apply, resume generation, application tracking, salary intelligence, and recruiter outreach using the JobGPT MCP server. Use this...

⭐ 0· 67·0 current·0 all-time
by@captainjackrana
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name, description, and declared tools (search_jobs, apply_to_job, generate_resume_for_job, etc.) match the stated purpose of job search automation and outreach. The single required env var (JOBGPT_API_KEY) aligns with a service-backed integration.
ℹ
Instruction Scope
SKILL.md stays within job-hunt tasks (searching, applying, resume upload, recruiter outreach). It does instruct the user/agent to add an MCP server pointing at https://mcp.6figr.com/mcp and to run `npx jobgpt-mcp-server`, which means the agent/user will be configured to forward job- and resume-related data (and the API key) to that remote service. The doc also explicitly warns not to call send_outreach without user confirmation, which is good.
ℹ
Install Mechanism
There is no registry install spec, but SKILL.md/README recommend installing/launching an npm package via `npx jobgpt-mcp-server` and adding an MCP endpoint. Using npx/npm to run remote code is a standard pattern but carries the usual moderate risk (remote code execution) and requires trusting the npm package and its repository.
✓
Credentials
Only JOBGPT_API_KEY is required and is the primary credential — this is proportional to the skill's functionality. However, that API key will be sent in an Authorization header to the MCP endpoint (and may be stored in the agent's MCP configuration), so you should treat it as sensitive and only provide it to a trusted operator.
ℹ
Persistence & Privilege
The skill does not request always:true and does not ask for broad system-level persistence. It does instruct adding an MCP server to the agent (which typically stores the server URL and header in agent config), so the API key may be stored in the agent's configuration/external MCP settings — expected but worth noting.
Assessment
This skill appears internally consistent for connecting your agent to JobGPT, but it depends on a third‑party MCP server and an npm package. Before installing or providing your API key: 1) verify 6figr.com and the jobgpt-mcp-server GitHub/npm sources (review the code/repo and publisher), 2) consider creating a scoped or revocable API key you can delete later, 3) be aware that resumes, application data, and any URLs you import will pass through the MCP endpoint, and 4) avoid running npx packages you don't trust — if unsure, inspect the package source locally or host the MCP server yourself. Confidence is medium because this is an instruction-only skill with no code bundled for inspection.

Like a lobster shell, security has layers — review code before you run it.

auto-applyvk97atjp7xx1rb3zyz2y71e3tn983mx38job-automationvk97atjp7xx1rb3zyz2y71e3tn983mx38job-searchvk97atjp7xx1rb3zyz2y71e3tn983mx38latestvk97atjp7xx1rb3zyz2y71e3tn983mx38mcpvk97atjp7xx1rb3zyz2y71e3tn983mx38recruiter-outreachvk97atjp7xx1rb3zyz2y71e3tn983mx38resumevk97atjp7xx1rb3zyz2y71e3tn983mx38

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💼 Clawdis
EnvJOBGPT_API_KEY
Primary envJOBGPT_API_KEY

Comments