Security checks across malware telemetry and agentic risk
This career assistant is coherent, but it needs review because it can act on sensitive job-search data, send applications or recruiter messages, persist credentials/data, and recommends an unsafe remote installer.
Review this skill before installing. Prefer manual or verifiable installation over the curl-to-bash command. Use it only if you are comfortable storing career data locally and syncing profile, application, and message data through Coffee Shop. Require the agent to show you and get approval for every profile sync, job application, and outbound recruiter message. Static scan was clean and VirusTotal was pending; this Review verdict is based on the artifact behavior itself.
Get the currently stored candidate profile snapshot. Returns the full CandidateSnapshot if one exists. **MCP Tool:** | Param | Type | Required | Constraints | |-------|------|----------|-------------|
Validate and store a candidate profile snapshot, sync to Coffee Shop hub. Changes are reflected in search results within minutes. **MCP Tool:** | Param | Type | Required | Constraints | Notes | |-------|------|----------|-------------|-------|
Submit an application for a job posting via Coffee Shop hub. Uses the stored candidate profile (or a minimal snapshot from the agent card if no profile is stored). **MCP Tool:** | Param | Type | Required | Constraints | Notes | |-------|------|----------|-------------|-------|
List your submitted job applications, optionally filtered by status. **MCP Tool:** | Param | Type | Required | Constraints | Notes | |-------|------|----------|-------------|-------|
Check inbox for messages from employers or candidates. Messages include interview requests, questions, status updates, and offers. **MCP Tool:** | Param | Type | Required | Constraints | Notes | |-------|------|----------|-------------|-------|
Reply to a message in your inbox. Messages are routed through the Coffee Shop hub and may reach human recruiters. **MCP Tool:** | Param | Type | Required | Constraints | Notes | |-------|------|----------|-------------|-------|
Register an agent card with Coffee Shop. Returns an API key (shown only once). **MCP Tool:** | Param | Type | Required | Constraints | Notes | |-------|------|----------|-------------|-------|
### Communication Your messages may reach human recruiters. Write accordingly. - **Professional but human.** Not stiff corporate language, not casual texting. Write like a competent professional who respects the reader's time. - **Interview scheduling:** Provide 3-4 specific time slots across 2-3 days. Always include timezone. Respond within 24 hours.
- **`express_interest`** requires a `job_id` from search results. The `match_reasoning` field (max 4000 chars) is your cover letter -- always include it for Tier 1 and Tier 2 applications. - **`update_profile`** syncs to the Coffee Shop hub automatically. Changes are reflected in search results within minutes. - **`check_inbox`** with `--unread-only` keeps your inbox manageable during active search. - **`respond_to_message`** sends through the hub. Messages may reach human recruiters, so write accordingly. See [Tool & CLI Reference](references/TOOLS.md) for full schemas, parameters, and return types.
### skills.sh (recommended) ```bash curl -fsSL https://skills.sh/i/talentclaw | bash ``` This installs talentclaw and its dependencies (Node.js 22+, Coffee Shop CLI) automatically. Works on macOS and Linux.
### skills.sh (recommended) ```bash curl -fsSL https://skills.sh/i/talentclaw | bash ``` This installs talentclaw and its dependencies (Node.js 22+, Coffee Shop CLI) automatically. Works on macOS and Linux.
66/66 vendors flagged this skill as clean.
