linkedin-job-scraper

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a direct GitHub repository (speedyapply/JobSpy) from an unverified/unknown account rather than an official vendor or well-known package source, so it could host unreviewed or malicious code and is therefore potentially suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow runs a runtime scraper (scripts/jobspy_scraper.py calling jobspy.scrape_jobs) that fetches LinkedIn job listings and (optionally) full job descriptions from an external site, then prints/saves the resulting text (including DESCRIPTION) into the agent’s context via the script’s stdout/CSV output.