ClawHub
Back to skill

Security audit

BOSS直聘仿人求职助手

Security checks across malware telemetry and agentic risk

Overview

This skill automates BOSS Zhipin job-search workflows with disclosed authorization gates; its main risks are expected account actions and local retention of job-search data.

Install only if you are comfortable letting the skill operate a logged-in BOSS account through agent-browser-runtime. Review every send/bookmark action, keep AUTHORIZED unset unless you intend account changes, and manage local files under .work plus profile.yaml/target_library.csv because they may contain job-search and recruiter contact data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Intent-Code Divergence

Medium
Confidence
92% confidence
Finding
The code explicitly documents that the DAILY_CAP guard only applies in the local backend path and is not enforced in hosted mode, even though the skill’s safety model treats rate limiting as an anti-abuse control. In a job-application automation context, this creates a real policy and safety gap: an operator can execute state-changing actions without the intended code-level cap, increasing the risk of mass actions, account throttling, or anti-bot enforcement.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The script persists extracted chat scan results to a JSON file on disk by default, and those results may contain sensitive conversation metadata such as contact identities, timestamps, or other job-seeking activity data. In this skill context, the data comes from a real recruiting/chat platform and is handled in an automation workflow, so silent local persistence increases the chance of unintended retention, later exfiltration, or access by other local processes/users.

Unpinned Dependencies

Low
Category
Supply Chain
Content
# boss-zhipin-copilot Python 依赖
# 安装: python3 -m pip install -r requirements.txt
pyyaml>=6.0
Confidence
84% confidence
Finding
pyyaml>=6.0

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.