ClawHub
Back to skill

Security audit

Career Hunter

Security checks for vulnerabilities and agentic risk

Overview

This job-search skill saves resumes, cover letters, and application tracking data locally as part of its stated purpose, with no evidence of hidden execution, exfiltration, or privilege abuse.

Install this only if you are comfortable with the agent keeping job-search records and generated application materials on disk. Review or delete ~/.openclaw/job-tracker.json, resume.md, and cover-letter files when they are no longer needed, especially on shared machines.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Session Persistence

Medium
Category
Rogue Agent
Confidence
60% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 4)May include surrounding context.

md
---
name: job-hunter
description: >
  Job search assistant. Generate and polish resumes, write cover letters,
  track applications, prepare for interviews, and search for jobs.
  Use when the user asks about jobs, resume, cover letter, interview prep,
  or application tracking. Triggers on: "find me a job", "update my resume",

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger term "career" is overly broad and can activate the skill for many generic conversations that are not explicit requests for job-search assistance. That increases the chance the skill will engage and begin collecting or storing personal employment data in contexts where the user did not clearly intend to use this capability.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill instructs persistent storage of job application records in ~/.openclaw/job-tracker.json, which may contain sensitive personal and professional data such as companies, roles, notes, referrals, and salary ranges. Because there is no requirement to warn the user or obtain consent before saving, the skill can create privacy and data-retention risks without informed user awareness.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

Saving resumes and cover letters locally creates persistent files containing highly sensitive personal information, including work history, contact details, and tailored application materials. Without an explicit warning or confirmation, users may not realize these files are being written to disk and retained after the session ends.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.