ClawHub
Back to skill

Security audit

Swelist

Security checks across malware telemetry and agentic risk

Overview

This job-search skill appears useful, but it needs review because it under-discloses persistent local tracking and third-party handling of resume/job data.

Review this skill before installing. Treat tracker data as persistent local records, check where its SQLite database and exports are written, and only use jobgpt with resume or background files after redacting details you do not want sent to OpenAI.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Intent-Code Divergence

High
Confidence
90% confidence
Finding
The skill claims 'No side effects' and 'No persistent storage' even though the tracker subcommand initializes, reads, updates, and exports a persistent SQLite database. This can mislead an agent or user into invoking state-changing commands under the false assumption they are read-only, causing unintended local data creation, modification, or disclosure.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The tracker section documents commands that create, update, and export application records from a local SQLite database without a prominent warning that these actions write persistent personal job-search data to disk. In an agent-driven setting, that omission increases the chance of unintentional collection or exposure of sensitive career information.

Missing User Warnings

High
Confidence
96% confidence
Finding
The `jobgpt` commands send user prompts and optional resume file contents to the OpenAI API, but the skill does not clearly warn that personal, employment, and resume data will leave the local machine and be processed by a third party. This creates a meaningful privacy risk, especially if an agent forwards sensitive candidate information without explicit consent.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.