Job Tracker

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill coherently stores job-application information in a local SQLite database and shows no evidence of network access, credential use, or destructive behavior.

This appears safe for its stated purpose. Before installing, be aware that your application history, recruiter details, follow-up dates, and notes are saved locally in a SQLite database under the skill runtime directory.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Job-search history and contact details may remain on disk after use and may be visible to anyone or any process with access to the skill directory.

Why it was flagged

This confirms the skill persists job-application data locally; the examples and script schema show this can include recruiter/contact details, follow-up dates, and notes.

Skill content
The helper script stores state in `{baseDir}/.runtime/job-tracker.db`.
Recommendation

Use the skill only on a trusted device, avoid entering unnecessary sensitive notes, and delete `{baseDir}/.runtime/job-tracker.db` if you no longer want the records retained.