cv-job-match
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill runs a local Python utility,
scripts/rocketlist_job.py, to scan job sitemaps and parse structured data from job detail pages. - [EXTERNAL_DOWNLOADS]: The script fetches job sitemaps and HTML content from
rocketlist.ai. It also attempts to connect to a public MCP server atrocketlist.ai/mcpfor enhanced search capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted job descriptions and requirement lists from the Rocketlist job board. This data is ingested as part of the core job-matching workflow to identify gaps and fit between the candidate's CV and live postings.
Audit Metadata