Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Swelist

retrieves recently added technology internship and new‑graduate job postings.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
2 · 1.7k · 0 current installs · 0 all-time installs
byYuan Chen@chenyuan99
MIT-0
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (fetch public internship/new‑grad job postings) match the requested binary ('swelist') and the declared install (PyPI package 'swelist'). No credentials, config paths, or unrelated binaries are requested.
Instruction Scope
SKILL.md confines behavior to running the swelist CLI with flags, fetching live data from public GitHub repos, writing only to STDOUT, and consuming no stdin or local files. The doc asserts 'no side effects' and 'no persistent storage' — those are reasonable expectations but cannot be verified without inspecting the installed package.
Install Mechanism
Install is via PyPI ('swelist' package) which is appropriate for a Python CLI. Installing a PyPI package executes third-party code on the host; the installer is not a direct download from an unknown URL, but the package itself is external and not included in this skill bundle.
Credentials
No environment variables, secrets, or config paths are requested. The declared requirements (Python 3.8+, internet access) are proportional to the stated task of fetching public data.
Persistence & Privilege
Skill is not always‑on and does not request elevated persistence. It is user-invocable and allows autonomous invocation per platform defaults — this is expected for automation use cases and is not by itself a red flag.
Assessment
This skill appears coherent: it calls a CLI that pulls public job postings and asks for no credentials. However the actual behavior depends on the external PyPI package 'swelist', which is not included here. Before installing or granting an agent the ability to run it, review the PyPI project page and source repository (check package files, maintainer, recent releases, and dependencies). If you plan to run it on your machine or allow autonomous agents to invoke it, prefer installing in an isolated environment (virtualenv or container), avoid running as root, and verify there are no unexpected network endpoints or credential access in the package. If you need higher assurance, request the package source or a reproducible build so you can inspect what the installed binary actually does.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.2
Download zip
latestvk977gt1qewzs1bp4y929vvbyq980c182

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

💼 Clawdis
Binsswelist

Install

Install swelist (uv)
Bins: swelist
uv tool install swelist

SKILL.md

swelist

This document defines the operational capabilities, invocation contract, and usage semantics of the swelist CLI tool for AI agents, schedulers, and automation systems.


Tool Identity

  • Name: swelist
  • Type: Command-Line Interface (CLI)
  • Language: Python
  • Distribution: PyPI
  • Execution Model: Stateless, read-only

Purpose

swelist retrieves recently added technology internship and new‑graduate job postings from curated public GitHub repositories and renders them in a predictable, text-based format.

It is optimized for: - Automation pipelines - Periodic polling agents - Human-in-the-loop job search workflows


Data Sources

  • SimplifyJobs / Summer2025-Internships
  • SimplifyJobs / New-Grad-Positions

Data is fetched live at runtime.


Installation

pip install swelist

Invocation Contract

swelist [--role ROLE] [--timeframe TIMEFRAME]

The tool accepts only CLI flags. No stdin is consumed.


Parameters

--role

Controls which category of jobs to retrieve.

Value Meaning


internship Internship roles (default) newgrad New‑graduate roles

Example:

swelist --role newgrad

--timeframe

Controls recency filtering.

Value Time Window


lastday Last 24 hours lastweek Last 7 days lastmonth Last 30 days

Example:

swelist --timeframe lastweek

Output Contract

  • Output is written to STDOUT
  • Format is human- and agent-readable plain text
  • No JSON or structured serialization

Job Posting Fields

Each job entry contains:

  • Company (string)
  • Title (string)
  • Location (string)
  • Link (URL)

Example:

Company: Example Corp
Title: Software Engineer Intern
Location: Remote
Link: https://example.com/apply

Execution Guarantees

  • No side effects
  • No persistent storage
  • Safe for repeated execution
  • Deterministic given identical upstream data
  • No authentication required

Error Behavior

  • Network issues may raise runtime errors or result in empty output
  • Invalid flags produce CLI usage errors
  • Zero matching jobs produces valid empty result output

Environment Requirements

  • Python 3.8+
  • Internet access
  • Supported on macOS, Linux, Windows

Agent-Oriented Use Cases

  • Daily polling for new internship postings
  • Weekly new‑grad job aggregation
  • Feeding results into ranking, scoring, or alerting agents
  • Execution via cron, CI pipelines, or autonomous agents

Known Limitations

  • No built‑in alerting
  • No local caching
  • No deduplication beyond source data
  • No JSON output format

Safety & Compliance

  • Uses only public data
  • No user tracking
  • No credential usage
  • No scraping of private systems

Versioning

Behavior may evolve with upstream data sources. CLI flags are considered stable within a major version.


End of document.

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…