find-job
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill is largely aligned with its stated job-search purpose and sends data to official LinkedIn endpoints, but it enables autonomous real-world actions by automatically submitting applications and includes an optional raw-credential-file login path. Main risks are autonomy abuse, local secret access, and handling untrusted LinkedIn content with action-capable browser tools, not confirmed malware or covert exfiltration.
Confidence: 89%Severity: 78%
Audit Metadata