boss-resume-downloader

SUSPICIOUS. The skill is broadly aligned with its stated purpose of recruiter resume synchronization, and it does not obviously exfiltrate data to third-party services. However, it automates repeated authenticated access to highly sensitive candidate resumes, stores raw responses locally, and includes delay/cap logic aimed at reducing platform detection. The main issues are privacy impact, unattended platform actions, and unclear provenance of the required external CLI/package rather than confirmed malware.