Job Search MCP (JobSpy)

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent with its job-search purpose, but users should note that it relies on an external MCP server and unpinned Python packages.

This appears safe to use for its stated job-search purpose. Before installing, use a virtual environment, consider pinning dependency versions, and make sure the JobSpy MCP server you configure is trusted.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing unpinned dependencies can pull newer package versions than expected, which may change behavior or introduce dependency risk.

Why it was flagged

The setup instructions install unpinned packages from the Python package ecosystem. This is purpose-aligned for a Python/MCP-based job search skill, but package versions and provenance are not fixed in the artifact.

Skill content
pip install mcp python-jobspy pandas pydantic
Recommendation

Use a virtual environment as instructed, consider pinning package versions, and install from trusted package sources.

What this means

Search terms such as job title, location, company, and salary preferences may be sent through the configured MCP server and onward to job-listing sources.

Why it was flagged

The skill relies on an MCP server to perform job searches. This is aligned with the stated purpose, but the artifact does not specify the server configuration, trust boundary, or data-handling details.

Skill content
using the JobSpy MCP server
Recommendation

Configure only a trusted JobSpy MCP server and avoid sending sensitive personal information unless you understand how the server and job-board integrations handle it.