boss-zhipin-scraper
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the 'macOS Computer Use' capability to control a Chrome browser for job search automation. It establishes strict boundaries to only interact with the 'BOSS-Agent' profile and explicitly prohibits the use of unauthorized automation frameworks like Playwright, CDP, or hidden APIs.
- [DATA_EXFILTRATION]: The skill processes sensitive user data, including resumes and job preferences. It incorporates explicit instructions to avoid capturing or displaying personally identifiable information (PII) such as phone numbers and email addresses, and uses local files (
~/.boss-zhipin-scraper/) for state persistence and logging. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests job description data from external web pages. To mitigate this, the skill implements a state machine with multiple 'confirmation gates' (SEARCH_CONFIRM and OUTREACH_CONFIRM), ensuring that the agent does not take external actions without explicit human approval.
Audit Metadata