juicebox-core-workflow-a

SUSPICIOUS: The core recruiting/search/export purpose is coherent with Juicebox and ATS integrations, and there is no clear credential theft or off-purpose exfiltration. Risk comes from broad npm-capable bash permissions, lack of a verified official SDK/install path, and the ability to perform real ATS exports despite test-only language.