Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed, read-only helper for fetching and parsing a user's own Jobber Client Hub data through an approved browser bridge.
Install only if you are comfortable granting the fpx bridge read access to your signed-in Jobber tab. Treat the hub URL and any saved HTML or JSON output like private billing data, verify the CLI and extension sources, and keep the extension site access limited to getjobber.com.
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
looks like "you have no invoices" rather than like a bug.
The parser warns on stderr whenever it returns an empty list, for exactly this
reason. An empty result with no warning means the page genuinely had none.
## Exit codes
The skill instructs the user to perform live network access via the external fpx CLI and a browser extension, but it does not declare explicit tool scope or permissions metadata. In an agent setting, missing scope declarations can cause network-capable behavior to be invoked without clear policy boundaries, increasing the risk of unintended data access to sensitive customer portal content.
Line L140 redirects a fetched invoice detail page into invoice.html, which creates a local copy of potentially sensitive billing and customer information. The surrounding text explains how to do this but does not include any warning about local data retention, sensitivity, or cleanup.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# unauthenticated: the field is hidden, not rejected
curl -s -X POST https://api.getjobber.com/api/graphql \
-H 'Content-Type: application/json' \
-H 'X-JOBBER-GRAPHQL-VERSION: 2025-04-16' \
-d '{"query":"{ account { id name } }"}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# unauthenticated: the field is hidden, not rejected
curl -s -X POST https://api.getjobber.com/api/graphql \
-H 'Content-Type: application/json' \
-H 'X-JOBBER-GRAPHQL-VERSION: 2025-04-16' \
-d '{"query":"{ account { id name } }"}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# unauthenticated: the field is hidden, not rejected
curl -s -X POST https://api.getjobber.com/api/graphql \
-H 'Content-Type: application/json' \
-H 'X-JOBBER-GRAPHQL-VERSION: 2025-04-16' \
-d '{"query":"{ account { id name } }"}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# unauthenticated: the field is hidden, not rejected
curl -s -X POST https://api.getjobber.com/api/graphql \
-H 'Content-Type: application/json' \
-H 'X-JOBBER-GRAPHQL-VERSION: 2025-04-16' \
-d '{"query":"{ account { id name } }"}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# unauthenticated: the field is hidden, not rejected
curl -s -X POST https://api.getjobber.com/api/graphql \
-H 'Content-Type: application/json' \
-H 'X-JOBBER-GRAPHQL-VERSION: 2025-04-16' \
-d '{"query":"{ account { id name } }"}'
No suspicious patterns detected.