boss-agent-cli-job-search

SUSPICIOUS. The core job-search functionality aligns with the stated purpose, and the main CLI appears to come from a real PyPI/GitHub project. However, the skill expands trust to an unrelated third-party browser automation package marketed for anti-detection, uses unpinned installs, and exposes agent-driven account actions through MCP/subprocess patterns. No direct credential exfiltration or clearly malicious data routing is shown, but the install and execution footprint is broader than a simple read-only job-search helper.