Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Job Auto Apply

v1.0.0

Automated job search and application system for Clawdbot. Use when the user wants to search for jobs and automatically apply to positions matching their crit...

0· 33·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for marjoriebroad/job-auto-apply-2.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Job Auto Apply" (marjoriebroad/job-auto-apply-2) from ClawHub.
Skill page: https://clawhub.ai/marjoriebroad/job-auto-apply-2
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install job-auto-apply-2

ClawHub CLI

Package manager switcher

npx clawhub@latest install job-auto-apply-2
Security Scan
Capability signals
Requires OAuth tokenRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill claims full integration with LinkedIn, Indeed, Glassdoor, ZipRecruiter and Wellfound (including OAuth/Easy Apply) but the registry lists no required environment variables or platform credentials. Real integrations would require OAuth tokens/API keys for those platforms; those credentials are not declared in the manifest. This is disproportionate to the stated purpose and indicates the manifest and implementation are out of sync.
!
Instruction Scope
SKILL.md explicitly instructs use of SkillBoss API Hub and requests SKILLBOSS_API_KEY, recommends web scraping (Selenium/Playwright), captcha services (2Captcha/Anti-Captcha) and proxies, and suggests storing a full user profile with paths to resumes. The skill's instructions involve reading local files, calling external APIs, and automating form submissions — yet the published requirements don't declare these data accesses or credentials. The instructions also include open-ended guidance (scraping, captcha solving) that could violate third-party ToS.
Install Mechanism
No install spec is provided (instruction-only plus included code file). That lowers install-time risk because nothing is automatically downloaded or executed by an installer, but the included Python code will run locally when invoked.
!
Credentials
The SKILL.md (and code) require SKILLBOSS_API_KEY, yet the registry metadata advertised no required env vars — a clear mismatch. Also, the skill's functionality would realistically need multiple additional credentials (OAuth tokens, API keys for LinkedIn/Indeed/Wellfound/ZipRecruiter/Glassdoor) but none are declared. The code hard-fails on missing SKILLBOSS_API_KEY (os.environ[...] usage), which is an operational and disclosure inconsistency.
Persistence & Privilege
The skill is not marked always:true and does not request permanent elevated platform privileges in the manifest. It suggests storing a profile file and configuration, but there is no evidence it alters other skills or global agent settings.
What to consider before installing
Do not enable automatic, autonomous application submission until these inconsistencies are resolved. Specifically: - Ask the publisher to reconcile the manifest and SKILL.md: the registry should list SKILLBOSS_API_KEY (and any other required platform credentials) if the code expects them. - Verify which external endpoints are used: the code uses https://api.heybossai.com while docs reference api.skillboss.com — ask for clarification and confirm the legitimate service domain. - Do not provide platform OAuth tokens or API keys (LinkedIn, Wellfound, etc.) without understanding exactly how they are stored and used; the skill currently does not declare these but needs them to function. - Prefer dry-run/manual-confirm mode; test locally in an isolated environment first and review logs and network traffic (or run with a read-only profile) before enabling auto-apply. - Review the code for any unexpected data exfiltration (unexpected domains, hard-coded endpoints) and confirm the author/legal compliance with job platform ToS when scraping or automating submissions. - If you proceed, rotate any keys you provide and limit their scope; require explicit, per-application confirmation rather than fully autonomous operation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c1hw3sh0q9h2cw9x59wtkw185m0wg
33downloads
0stars
1versions
Updated 1d ago
v1.0.0
MIT-0

Job Auto-Apply Skill

Automate job searching and application submission across multiple job platforms using Clawdbot. AI-powered cover letter generation and job compatibility analysis are provided by SkillBoss API Hub.

Overview

This skill enables automated job search and application workflows. It searches for jobs matching user criteria, analyzes compatibility using SkillBoss API Hub's AI capabilities, generates tailored cover letters, and submits applications automatically or with user confirmation.

Supported Platforms:

  • LinkedIn (including Easy Apply)
  • Indeed
  • Glassdoor
  • ZipRecruiter
  • Wellfound (AngelList)

Quick Start

1. Set Up Environment

export SKILLBOSS_API_KEY=your_skillboss_api_key

2. Set Up User Profile

First, create a user profile using the template:

# Copy the profile template
cp profile_template.json ~/job_profile.json

# Edit with user's information
# Fill in: name, email, phone, resume path, skills, preferences

3. Run Job Search and Apply

# Basic usage - search and apply (dry run)
python job_search_apply.py \
  --title "Software Engineer" \
  --location "San Francisco, CA" \
  --remote \
  --max-applications 10 \
  --dry-run

# With profile file
python job_search_apply.py \
  --profile ~/job_profile.json \
  --title "Backend Engineer" \
  --platforms linkedin,indeed \
  --auto-apply

# Production mode (actual applications)
python job_search_apply.py \
  --profile ~/job_profile.json \
  --title "Senior Developer" \
  --no-dry-run \
  --require-confirmation

Workflow Steps

Step 1: Profile Configuration

Load the user's profile from the template or create programmatically:

from job_search_apply import ApplicantProfile

profile = ApplicantProfile(
    full_name="Jane Doe",
    email="jane@example.com",
    phone="+1234567890",
    resume_path="~/Documents/resume.pdf",
    linkedin_url="https://linkedin.com/in/janedoe",
    years_experience=5,
    authorized_to_work=True,
    requires_sponsorship=False
)

Step 2: Define Search Parameters

from job_search_apply import JobSearchParams, JobPlatform

search_params = JobSearchParams(
    title="Software Engineer",
    location="Remote",
    remote=True,
    experience_level="mid",
    job_type="full-time",
    salary_min=100000,
    platforms=[JobPlatform.LINKEDIN, JobPlatform.INDEED]
)

Step 3: Run Automated Application

from job_search_apply import auto_apply_workflow

results = auto_apply_workflow(
    search_params=search_params,
    profile=profile,
    max_applications=10,
    min_match_score=0.75,
    dry_run=False,
    require_confirmation=True
)

Integration with Clawdbot

Using as a Clawdbot Tool

When installed as a Clawdbot skill, invoke via natural language:

Example prompts:

  • "Find and apply to Python developer jobs in San Francisco"
  • "Search for remote backend engineer positions and apply to the top 5 matches"
  • "Auto-apply to senior software engineer roles with 100k+ salary"
  • "Apply to jobs at tech startups on Wellfound"

The skill will:

  1. Parse the user's intent and extract search parameters
  2. Load the user's profile from saved configuration
  3. Search across specified platforms
  4. Analyze job compatibility via SkillBoss API Hub (AI-powered)
  5. Generate tailored cover letters via SkillBoss API Hub
  6. Submit applications (with confirmation if enabled)
  7. Report results and track applications

Configuration in Clawdbot

Add to your Clawdbot configuration:

{
  "skills": {
    "job-auto-apply": {
      "enabled": true,
      "profile_path": "~/job_profile.json",
      "default_platforms": ["linkedin", "indeed"],
      "max_daily_applications": 10,
      "require_confirmation": true,
      "dry_run": false
    }
  }
}

Features

1. Multi-Platform Search

  • Searches across all major job platforms
  • Uses official APIs when available
  • Falls back to web scraping for platforms without APIs

2. Smart Matching (powered by SkillBoss API Hub)

  • Analyzes job descriptions for requirement matching using AI via SkillBoss API Hub
  • Calculates compatibility scores
  • Filters jobs based on minimum match threshold

3. Application Customization (powered by SkillBoss API Hub)

  • Generates tailored cover letters per job using SkillBoss API Hub's AI
  • Customizes resume emphasis based on job requirements
  • Handles platform-specific application forms

4. Safety Features

  • Dry Run Mode: Test without submitting applications
  • Manual Confirmation: Review each application before submission
  • Rate Limiting: Prevents overwhelming platforms
  • Application Logging: Tracks all submissions for reference

5. Form Automation

Automatically fills common application fields:

  • Personal information
  • Work authorization status
  • Education and experience
  • Skills and certifications
  • Screening questions (using SkillBoss API Hub AI when needed)

Advanced Usage

Custom Cover Letter Templates

Create a template with placeholders:

Dear Hiring Manager at {company},

I am excited to apply for the {position} role. With {years} years of 
experience in {skills}, I believe I would be an excellent fit.

{custom_paragraph}

I look forward to discussing how I can contribute to {company}'s success.

Best regards,
{name}

Application Tracking

Results are automatically saved in JSON format with details on each application submitted, including timestamps, match scores, and status.

Bundled Resources

Scripts

  • job_search_apply.py - Main automation script with search, matching, and application logic (AI features via SkillBoss API Hub)

References

  • platform_integration.md - Technical documentation for API integration, web scraping, form automation, and platform-specific details

Assets

  • profile_template.json - Comprehensive profile template with all required and optional fields

Safety and Ethics

Important Guidelines

  1. Truthfulness: Never misrepresent qualifications or experience
  2. Genuine Interest: Only apply to jobs you're actually interested in
  3. Rate Limiting: Respect platform limits and terms of service
  4. Manual Review: Consider enabling confirmation mode for quality control
  5. Privacy: Secure storage of personal information and credentials

Best Practices

  • Start with dry-run mode to verify behavior
  • Set reasonable limits (5-10 applications per day)
  • Use high match score thresholds (0.75+)
  • Enable confirmation for important applications
  • Track results to optimize strategy

Comments

Loading comments...