resume-writer
Warn
Audited by Socket on Jul 13, 2026
1 alert found:
AnomalyAnomalyscripts/Register-ResumeTipsRefreshTask.ps1
LOWAnomalyLOW
scripts/Register-ResumeTipsRefreshTask.ps1
This module is primarily an installer/orchestrator for persistence: it registers a weekly Task Scheduler job that executes a specific local PowerShell script. The main security weaknesses are the explicit '-ExecutionPolicy Bypass' and the absence of integrity/trust validation for the resolved script path/content. While this fragment alone shows no malicious payload behavior, it materially increases risk if the referenced script or SkillRoot location is tampered with.
Confidence: 61%Severity: 56%
Audit Metadata