job-seeker

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The overall purpose is coherent for a job-search automation skill, but the footprint is high-risk: it automates real-world applications, uploads sensitive personal documents to many third parties, stores extensive personal/contact data, and includes CAPTCHA bypass to evade anti-bot controls. The skill is not clearly malicious, but its autonomy, privacy impact, and unverifiable underlying implementation make it a high-risk agent capability.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Mar 21, 2026, 02:45 AM
Package URL
pkg:socket/skills-sh/serenorg%2Fseren-skills%2Fjob-seeker%2F@3e370da1b556d70e9455f536047ac78ececb1dd1