Security audit
resume-jd-matcher
Security checks across malware telemetry and agentic risk
Overview
The skill has a coherent resume-matching purpose, but it handles full resume data while using hard-coded API credentials and executing an unreviewed local Python file.
Before installing, verify or remove the absolute dynamic import, replace bundled API keys with your own secure credentials or placeholders, confirm the exact input/output folders, and decide whether storing full parsed resume text is acceptable for your privacy obligations.
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.