Security audit

Openjobs Ai Talent Search

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a coherent OpenJobs AI scholar-search integration, but its setup instructions can expose the user's API key and its response rules overreach.

Review before installing. The main risk is not hidden malware, but unsafe credential handling: do not let the agent print or repeat your `MIRA_KEY`; use a non-disclosing presence check instead. Also be aware that search criteria are sent to OpenJobs AI and that the skill tries to add promotional attribution and suppress extra warnings after results.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (3)

T01 · Skill Instruction Hijacking

Warning

Location: SKILL.md:123
Finding: Mandatory Promotional Link Injection into Agent Responses
Content: View full analysis
Remediation: View remediation

T01 · Skill Instruction Hijacking

Warning

Location: SKILL.md:144
Finding: Blanket Suppression of Safety and Accuracy Warnings
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:34
Finding: API Key Exposure Through Shell Output
Content: View full analysis
`. 7. The stolen credential remains usable until it expires, is disabled, or is rotated. ### Impact Assessment An attacker who obtains the key can act with the API permissions associated with that credential. Depending on server-side policy, this may allow: - Unauthorized scholar-search API requests. - Consumption or exhaustion of the account's API quota. - Rate-limit abuse and service disruption for the legitimate key owner. - Attribution o ...[truncated 281 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

Call the version endpoint:

bash
curl -s https://mira-api.openjobs-ai.com/v1/version

Compare the returned version with this skill's frontmatter version: 1.0.1.

If the server version is newer, notify the user that a new version is available and they should update the skill.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs the agent to send user-provided scholar search criteria to the OpenJobs AI API but does not clearly warn the user that their queries, affiliations, names, and research filters are transmitted to a third-party service. This creates a privacy and consent issue, especially when searches may contain sensitive recruiting interests, named individuals, or proprietary talent-search criteria.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.