Security audit
Security checks across malware telemetry and agentic risk
This is a coherent job-monitoring skill, but it deserves Review because it can run persistently, use ambient OpenClaw credentials, and send job/profile-derived data to external services.
Install only if you are comfortable with a persistent job watcher storing your job-search profile and application history. Prefer the default local KB and agent notification modes if you want less data sharing. Review any use of Firecrawl, Jina, 2brain, Telegram, or api judging because those modes can send watched URLs, job descriptions, profile-derived judgments, or messages to third-party services and may reuse existing OpenClaw credentials.
if not key:
raise RuntimeError("FIRECRAWL_API_KEY not set")
resp = http_json(
"https://api.firecrawl.dev/v1/scrape",
method="POST",
headers={"Authorization": f"Bearer {key}"},
json_body={"url": url, "formats": ["markdown"], "onlyMainContent": True},VirusTotal findings are pending for this skill version.
No suspicious patterns detected.