Remote Jobs Finder

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is a disclosed Remote Rocketship job-search integration; it uses a server-side API key and optional gateway extension in ways that match its stated purpose.

Before installing, confirm you trust the source, review the included gateway extension, back up any existing ~/.openclaw/extensions files, and set RR_API_KEY only on the server. The behavior shown is coherent for a Remote Rocketship job-search skill, but it does require a provider API key and may remember your job-search preferences.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the extension requires trusting it with the Remote Rocketship API key in the OpenClaw gateway environment.

Why it was flagged

The extension uses a server-side Remote Rocketship API key to authenticate the job-search request.

Skill content
const rrApiKey = process.env.RR_API_KEY; ... Authorization: `Bearer ${rrApiKey}`
Recommendation

Use a dedicated Remote Rocketship API key if available, keep it scoped to this service, and rotate it if the server or extension is compromised.

What this means

The manual setup can affect the OpenClaw gateway’s loaded extensions and may overwrite existing local extension files if present.

Why it was flagged

The skill includes a manual gateway-extension deployment step that changes files under the local OpenClaw extensions directory.

Skill content
cp SERVER_EXTENSION_openclaw_extensions_root/openclaw.plugin.json ~/.openclaw/extensions/openclaw.plugin.json
cp SERVER_EXTENSION_openclaw_extensions_root/index.ts ~/.openclaw/extensions/index.ts
Recommendation

Review the extension files before copying them, back up any existing ~/.openclaw/extensions files, and install only from a trusted source.

What this means

Your job preferences, work-location eligibility, and search cadence may be remembered by the agent.

Why it was flagged

The skill asks the agent to persist job-search preferences and pagination state for future conversational use.

Skill content
Maintain a simple user profile in memory so the user doesn’t need to repeat themselves: targetTitles, locationFilters, ... pollingCadence, ... lastQueryFilters
Recommendation

Avoid sharing more personal detail than needed, and ask the agent to clear or change saved preferences when they are no longer accurate.