find-job

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is largely aligned with its stated job-search purpose and sends data to official LinkedIn endpoints, but it enables autonomous real-world actions by automatically submitting applications and includes an optional raw-credential-file login path. Main risks are autonomy abuse, local secret access, and handling untrusted LinkedIn content with action-capable browser tools, not confirmed malware or covert exfiltration.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Sep 10, 2026, 06:39 PM
Package URL
pkg:socket/skills-sh/farukzahra%2Fagent-skills%2Ffind-job%2F@8c437347d84708567103bfa72f7a50adec35f2519e0abe61413f44a2377ebe60
Security Audit — socket — find-job