apply-job

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow navigates to and extracts text from arbitrary job posting URLs provided by the user via Playwright (mcp__playwright__browser_navigate, WebFetch), exposing the agent to outsider-authored free text from web pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The installer script downloads operational skill files and templates from a GitHub repository URL (https://raw.githubusercontent.com/theaayushstha1/job-applier-agent/main), constituting an external runtime/setup dependency from an individual-owned unofficial repository.