Job Watch
v1.0.0Automated job search with 7‑day filtering, scoring, and weekly report. To run the skill send "run job watch now".
⭐ 0· 42·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (weekly automated job search, 7‑day filtering, scoring, report) match the SKILL.md steps (scrape listed Moroccan job boards, filter, score, save report). The skill requests no environment credentials or external binaries, and it uses skill-owned memory files (profile.md, scoring.md, platforms.md) which is appropriate for a personalized job search. Minor inconsistency: README suggests an install command that pulls from a GitHub repo, but the registry entry contains no install spec — if you install from that external repo it could introduce code not present in this instruction-only package, so verify the repo before using it.
Instruction Scope
SKILL.md limits execution to web scraping/browser tools (explicitly forbids running shell commands) and instructs the agent to read/write files inside ~/.openclaw/workspace/skills/job-watch/memory/. That scope is coherent for a local job‑watch skill. Two things to note: (1) profile.md contains personal profile details (skills, locations) — the skill states it will not transmit PII, but generating reports in chat will necessarily surface profile-derived matches (local retention vs. what is sent externally should be considered); (2) the prohibition on shell commands is a runtime instruction to the agent but cannot technically prevent other installation methods from adding code that runs on the host — verify what you actually install/run.
Install Mechanism
There is no install spec in the registry (instruction-only), which is low risk because nothing is downloaded or executed by default. However, the README recommends installing via `clawhub install https://github.com/ElFilaliHamza/job-watch-skill` which would fetch external code; that is outside the manifest provided here and should be audited separately before using. No archives, URLs, or extraction steps are present in the registry package itself.
Credentials
The skill requires no environment variables, credentials, or third‑party keys — proportional to its stated purpose of scraping public job boards. The only sensitive data used are the user-provided profile files stored in the skill memory; that is expected but worth protecting (do not include passwords or secrets in profile.md).
Persistence & Privilege
The skill does not request elevated privileges or permanent presence (always:false). Its read/write actions are confined to its own skill workspace memory path (reports written into ~/.openclaw/.../memory/). It does not modify other skills or system-wide config per the provided instructions.
Assessment
This skill appears to do what it says: read your local profile/scoring/platform files, scrape public Moroccan job boards, score matches, and save a local report. Before using it: (1) Inspect the memory files (profile.md, scoring.md, platforms.md) and remove any sensitive values (passwords, tokens). (2) If you plan to run an installation command from GitHub (README suggests a repo), review that repository’s code — the registry package here is instruction-only, and pulling external code may add behavior not covered in this review. (3) Confirm you are comfortable with scraped results being printed in chat (report content may expose profile-derived data). (4) Ensure scraping targets are public and you comply with their robots.txt and terms; do not provide credentials for sites that require login. If you want higher assurance, request the actual repository/source code (if any) for a code-level review — that would increase confidence above 'medium'.Like a lobster shell, security has layers — review code before you run it.
latestvk9799tfktbncp3vrn86nrmj4vx84502r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💼 Clawdis