Jobautopilot Search
v1.3.0Reads your resume pool to build a candidate profile, then searches LinkedIn, Indeed, Glassdoor, ZipRecruiter, Google Jobs, and company career pages for match...
⭐ 0· 156·0 current·0 all-time
by@jerronl
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the required inputs and actions: it legitimately needs JOB_SEARCH_* vars, a RESUME_DIR, and tracker/handoff paths to build a profile, run searches, and record results.
Instruction Scope
SKILL.md explicitly instructs the agent to read all files in $RESUME_DIR, the tracker, and the handoff file, then use a browser tool to query external job sites and append results. That behavior is consistent with the stated purpose, but it involves reading potentially sensitive personal data (complete resumes) and sending queries via the browser tool; users should be aware of privacy implications and ensure RESUME_DIR contains only intended files. The instructions do not direct the agent to authenticate, post data, or transmit resume contents to arbitrary external endpoints beyond normal browsing/searching.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. Nothing is downloaded or written by an install step.
Credentials
All required env vars (keywords, location, tracker, handoff, resume dir, salary/age filters) are appropriate for a job-search/agent pipeline. No unrelated credentials or secrets are requested.
Persistence & Privilege
always:false (not force-installed). Model invocation is allowed (default), so the agent could invoke this skill autonomously. Combined with instructions to read local resumes, this raises a privacy concern: if you permit autonomous runs, the skill may access sensitive files without a separate confirmation step. Consider restricting autonomous access or ensuring agent policies require explicit user approval before running.
Assessment
This skill appears to do what it says, but it will read all files in the directory you point it at and use a browser tool to query external job sites. Before installing or running it: 1) verify RESUME_DIR points only to resumes you are willing to expose; consider creating a sanitized copy with only the data the agent needs; 2) confirm JOB_SEARCH_TRACKER and JOB_SEARCH_HANDOFF paths are acceptable locations for appended data; 3) avoid granting persistent/autonomous execution if you want explicit approval before the agent reads your resumes; 4) be aware browsing LinkedIn/Indeed may surface or require logins — do not supply unrelated credentials to the skill. If the skill included code, network endpoints, or requested unrelated cloud credentials, the assessment would change to suspicious — provide those artifacts if available for re-evaluation.Like a lobster shell, security has layers — review code before you run it.
latestvk976j21q803w9ah12b39tp69ts842ry0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍 Clawdis
EnvJOB_SEARCH_KEYWORDS, JOB_SEARCH_LOCATION, JOB_SEARCH_TRACKER, JOB_SEARCH_HANDOFF, RESUME_DIR, JOB_SEARCH_MIN_SALARY, JOB_SEARCH_MAX_AGE_DAYS
