xnyjobsearch

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: xnyjobsearch Version: 0.1.1 The skill is a legitimate job search tool for the 'Carbon Search Talent Network' (hsolar.com), a recruitment platform for the new energy industry. It uses a standard HTTPS POST request to a specific API endpoint (https://openapi.hsolar.com/Api/V1.0/Search/Jobsv2) with appropriate parameters like keywords, location, and industry, and contains no evidence of data exfiltration, malicious execution, or prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your job-search keywords, location, industry, and pagination choices may be sent to hsolar.com.

Why it was flagged

The skill is designed to call a third-party job-search API. This is narrow, disclosed, and aligned with the stated purpose.

Skill content
api:\n  type: https\n  method: POST\n  url: https://openapi.hsolar.com/Api/V1.0/Search/Jobsv2
Recommendation

Use it for ordinary job searches and avoid entering unrelated sensitive personal information into search queries.

What this means

You have less external context for verifying the publisher or implementation history.

Why it was flagged

The registry does not provide a source repository or homepage, which limits provenance visibility, although the skill is instruction-only and has no code or install step.

Skill content
Source: unknown; Homepage: none
Recommendation

If provenance is important, verify the publisher and the hsolar API independently before relying on the skill.