job-seeker
Warn
Audited by Socket on Mar 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The overall purpose is coherent for a job-search automation skill, but the footprint is high-risk: it automates real-world applications, uploads sensitive personal documents to many third parties, stores extensive personal/contact data, and includes CAPTCHA bypass to evade anti-bot controls. The skill is not clearly malicious, but its autonomy, privacy impact, and unverifiable underlying implementation make it a high-risk agent capability.
Confidence: 87%Severity: 82%
Audit Metadata