scrape
Warn
Audited by Socket on Aug 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the job-search purpose is coherent, and there is no clear credential theft or malicious exfiltration. The main issue is transitive execution trust: this skill automatically discovers and runs arbitrary local portal skills via Bun from wildcard paths, so its safety depends on separately installed skills not reviewed here. That makes the overall security risk medium-high despite otherwise proportionate data flows.
Confidence: 87%Severity: 76%
Audit Metadata