Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Job Auto Apply

v1.0.0

Automated job search and application system for Clawdbot. Use when the user wants to search for jobs and automatically apply to positions matching their crit...

0· 37·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for marjoriebroad/qui-job-auto-apply.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Job Auto Apply" (marjoriebroad/qui-job-auto-apply) from ClawHub.
Skill page: https://clawhub.ai/marjoriebroad/qui-job-auto-apply
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install qui-job-auto-apply

ClawHub CLI

Package manager switcher

npx clawhub@latest install qui-job-auto-apply
Security Scan
Capability signals
Requires OAuth tokenRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the files: the package is an auto-apply job tool that uses an external 'SkillBoss' API for analysis/cover letters. However, the code's search/apply implementation is largely placeholder (search_jobs returns no real results) while the docs claim multi-platform automated applying; that is an overstatement of current capability. Also README/SKILL.md reference 'SkillBoss' while the code posts to api.heybossai.com and platform_integration examples reference api.skillboss.com — inconsistent endpoints.
!
Instruction Scope
SKILL.md tells the agent to use SKILLBOSS_API_KEY and to load a profile and run the script; the platform_integration doc instructs use of Selenium/Playwright, residential proxies, and third-party captcha services (2Captcha/Anti-Captcha). Those instructions broaden the scope to include scraping, captcha-solving, and proxy usage (and thus potentially additional credentials) even though the skill's declared requirements list only SKILLBOSS_API_KEY. The skill also suggests interacting with user resumes and profile files (expected) but does not declare or request the other credentials that scraping/automation would need (OAuth tokens, captcha API keys, proxy credentials).
Install Mechanism
No install spec is provided (instruction-only plus code files). That is lower risk from an install-time perspective because nothing is automatically downloaded or executed by an installer. The code itself will be run by the user/agent if invoked.
!
Credentials
The skill declares a single required env var (SKILLBOSS_API_KEY) which aligns with the code's top-level access to os.environ['SKILLBOSS_API_KEY']. But the platform integration guidance references OAuth tokens for LinkedIn/Wellfound, API keys for other platforms, captcha service keys, and proxy credentials — none of which are declared in requires.env. This is a mismatch: the skill will likely need more secrets/permissions to achieve the claimed automation, and those are not requested or explained up front.
Persistence & Privilege
The skill is not marked always:true, does not request to modify other skills, and has no install-time persistence mechanism. It will run only when invoked and does not appear to request permanent platform privileges in its metadata.
What to consider before installing
Things to check before installing or using this skill: - Verify the external API: the code calls https://api.heybossai.com/v1 but docs mention SkillBoss and other endpoints (api.skillboss.com). Confirm the legitimate service hostname and that you trust it before providing SKILLBOSS_API_KEY. - Prefer dry-run and manual confirmation: run the skill in dry-run mode to observe behavior and outputs before enabling actual submissions. - Expect additional credentials: full automation across LinkedIn/Indeed/etc. will require OAuth tokens, API keys, or account logins and possibly captcha/proxy service credentials — do not supply those unless you understand the exact flows and have isolated the environment. - Legal/ToS risk: the documentation explicitly recommends scraping, captcha solving, and residential proxies; that can violate platforms' Terms of Service and lead to account bans. Consider manual confirmation and limit automation. - Inspect and test code locally: review where network requests go, log outputs, and any file uploads (resume). Ensure secrets are stored safely and the code does not leak them to unexpected endpoints. - If you need to proceed: request clarification from the publisher about the endpoint discrepancy, exact platform authentication flows, and which additional env vars/credentials will be required. If uncertain, run inside an isolated VM/container and restrict network egress until verified.

Like a lobster shell, security has layers — review code before you run it.

latestvk972pd41snqcw571vjeynjna6985myds
37downloads
0stars
1versions
Updated 1d ago
v1.0.0
MIT-0

Job Auto-Apply Skill

Automate job searching and application submission across multiple job platforms using Clawdbot. AI-powered cover letter generation and job compatibility analysis are provided by SkillBoss API Hub.

Overview

This skill enables automated job search and application workflows. It searches for jobs matching user criteria, analyzes compatibility using SkillBoss API Hub's AI capabilities, generates tailored cover letters, and submits applications automatically or with user confirmation.

Supported Platforms:

  • LinkedIn (including Easy Apply)
  • Indeed
  • Glassdoor
  • ZipRecruiter
  • Wellfound (AngelList)

Quick Start

1. Set Up Environment

export SKILLBOSS_API_KEY=your_skillboss_api_key

2. Set Up User Profile

First, create a user profile using the template:

# Copy the profile template
cp profile_template.json ~/job_profile.json

# Edit with user's information
# Fill in: name, email, phone, resume path, skills, preferences

3. Run Job Search and Apply

# Basic usage - search and apply (dry run)
python job_search_apply.py \
  --title "Software Engineer" \
  --location "San Francisco, CA" \
  --remote \
  --max-applications 10 \
  --dry-run

# With profile file
python job_search_apply.py \
  --profile ~/job_profile.json \
  --title "Backend Engineer" \
  --platforms linkedin,indeed \
  --auto-apply

# Production mode (actual applications)
python job_search_apply.py \
  --profile ~/job_profile.json \
  --title "Senior Developer" \
  --no-dry-run \
  --require-confirmation

Workflow Steps

Step 1: Profile Configuration

Load the user's profile from the template or create programmatically:

from job_search_apply import ApplicantProfile

profile = ApplicantProfile(
    full_name="Jane Doe",
    email="jane@example.com",
    phone="+1234567890",
    resume_path="~/Documents/resume.pdf",
    linkedin_url="https://linkedin.com/in/janedoe",
    years_experience=5,
    authorized_to_work=True,
    requires_sponsorship=False
)

Step 2: Define Search Parameters

from job_search_apply import JobSearchParams, JobPlatform

search_params = JobSearchParams(
    title="Software Engineer",
    location="Remote",
    remote=True,
    experience_level="mid",
    job_type="full-time",
    salary_min=100000,
    platforms=[JobPlatform.LINKEDIN, JobPlatform.INDEED]
)

Step 3: Run Automated Application

from job_search_apply import auto_apply_workflow

results = auto_apply_workflow(
    search_params=search_params,
    profile=profile,
    max_applications=10,
    min_match_score=0.75,
    dry_run=False,
    require_confirmation=True
)

Integration with Clawdbot

Using as a Clawdbot Tool

When installed as a Clawdbot skill, invoke via natural language:

Example prompts:

  • "Find and apply to Python developer jobs in San Francisco"
  • "Search for remote backend engineer positions and apply to the top 5 matches"
  • "Auto-apply to senior software engineer roles with 100k+ salary"
  • "Apply to jobs at tech startups on Wellfound"

The skill will:

  1. Parse the user's intent and extract search parameters
  2. Load the user's profile from saved configuration
  3. Search across specified platforms
  4. Analyze job compatibility via SkillBoss API Hub (AI-powered)
  5. Generate tailored cover letters via SkillBoss API Hub
  6. Submit applications (with confirmation if enabled)
  7. Report results and track applications

Configuration in Clawdbot

Add to your Clawdbot configuration:

{
  "skills": {
    "job-auto-apply": {
      "enabled": true,
      "profile_path": "~/job_profile.json",
      "default_platforms": ["linkedin", "indeed"],
      "max_daily_applications": 10,
      "require_confirmation": true,
      "dry_run": false
    }
  }
}

Features

1. Multi-Platform Search

  • Searches across all major job platforms
  • Uses official APIs when available
  • Falls back to web scraping for platforms without APIs

2. Smart Matching (powered by SkillBoss API Hub)

  • Analyzes job descriptions for requirement matching using AI via SkillBoss API Hub
  • Calculates compatibility scores
  • Filters jobs based on minimum match threshold

3. Application Customization (powered by SkillBoss API Hub)

  • Generates tailored cover letters per job using SkillBoss API Hub's AI
  • Customizes resume emphasis based on job requirements
  • Handles platform-specific application forms

4. Safety Features

  • Dry Run Mode: Test without submitting applications
  • Manual Confirmation: Review each application before submission
  • Rate Limiting: Prevents overwhelming platforms
  • Application Logging: Tracks all submissions for reference

5. Form Automation

Automatically fills common application fields:

  • Personal information
  • Work authorization status
  • Education and experience
  • Skills and certifications
  • Screening questions (using SkillBoss API Hub AI when needed)

Advanced Usage

Custom Cover Letter Templates

Create a template with placeholders:

Dear Hiring Manager at {company},

I am excited to apply for the {position} role. With {years} years of 
experience in {skills}, I believe I would be an excellent fit.

{custom_paragraph}

I look forward to discussing how I can contribute to {company}'s success.

Best regards,
{name}

Application Tracking

Results are automatically saved in JSON format with details on each application submitted, including timestamps, match scores, and status.

Bundled Resources

Scripts

  • job_search_apply.py - Main automation script with search, matching, and application logic (AI features via SkillBoss API Hub)

References

  • platform_integration.md - Technical documentation for API integration, web scraping, form automation, and platform-specific details

Assets

  • profile_template.json - Comprehensive profile template with all required and optional fields

Safety and Ethics

Important Guidelines

  1. Truthfulness: Never misrepresent qualifications or experience
  2. Genuine Interest: Only apply to jobs you're actually interested in
  3. Rate Limiting: Respect platform limits and terms of service
  4. Manual Review: Consider enabling confirmation mode for quality control
  5. Privacy: Secure storage of personal information and credentials

Best Practices

  • Start with dry-run mode to verify behavior
  • Set reasonable limits (5-10 applications per day)
  • Use high match score thresholds (0.75+)
  • Enable confirmation for important applications
  • Track results to optimize strategy

Comments

Loading comments...