xnyjobsearch

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your job-search keywords, location, industry, and pagination choices may be sent to hsolar.com.

Why it was flagged

The skill is designed to call a third-party job-search API. This is narrow, disclosed, and aligned with the stated purpose.

Skill content
api:\n  type: https\n  method: POST\n  url: https://openapi.hsolar.com/Api/V1.0/Search/Jobsv2
Recommendation

Use it for ordinary job searches and avoid entering unrelated sensitive personal information into search queries.

What this means

You have less external context for verifying the publisher or implementation history.

Why it was flagged

The registry does not provide a source repository or homepage, which limits provenance visibility, although the skill is instruction-only and has no code or install step.

Skill content
Source: unknown; Homepage: none
Recommendation

If provenance is important, verify the publisher and the hsolar API independently before relying on the skill.