apply-job

SUSPICIOUS: the skill’s job-application capabilities mostly match its stated purpose and requested personal data, but the installation path is high-risk. A personal GitHub publisher, unpinned raw-GitHub/install.sh setup, and transitive installation through a third-party skills CLI create significant supply-chain and trust concerns; the optional guardrail-disable flag also weakens control over real-world actions.

SUSPICIOUS. The skill's purpose matches reading resume/profile files and using browser automation, but it crosses into high-risk autonomy by telling the agent to automatically submit applications and send recruiter emails/LinkedIn requests without routine confirmation. No credential theft, hidden exfiltration, or command injection is evident from the provided content, but the autonomous real-world actions and broad use of personal data make the skill high risk.