Security audit
Skills for finding a job on hh
Security checks across malware telemetry and agentic risk
Overview
The skill is mostly coherent for job search, but it can automate logged-in hh.ru account actions such as applying and raising resumes, and that sensitive browser-session authority is not clearly declared or tightly bounded.
Review this skill before installing. It is not showing exfiltration or destructive behavior, but it can perform real actions in a logged-in hh.ru browser session. Use a dedicated browser profile, confirm the active tab is hh.ru, set strict auto-apply limits, and explicitly decide whether post-apply resume raising is allowed.
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.