fk-boss-greeting

• Analyzed: May 14, 2026, 3:01 PM
• Findings: 1
• Version: 1.0.0
• Hash: ab418b7492d7a81836092890d9048f0f846daaed1332aae1fa36c5a4a67c4a02
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates job applications by extracting Chrome browser cookies via an external CLI tool (~/.local/bin/boss), which is a high-risk activity involving sensitive credential access. It also contains a hardcoded local development path (/Users/huguiqi/...) in SKILL.md for updates and uses a .sh extension for a Python script in scripts/boss_auto_greet.sh. While these behaviors align with the stated purpose of automation, the reliance on browser credential extraction and shell execution warrants caution.