jobgpt
Warn
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs users to execute
npx jobgpt-mcp-server, which downloads and runs external code from the NPM registry. - [EXTERNAL_DOWNLOADS]: The skill requires communication with a remote endpoint at
https://mcp.6figr.com/mcpto perform core functions like job matching and application tracking. - [PROMPT_INJECTION]: The
import_job_by_urltool enables the agent to ingest content from arbitrary external job boards, creating a surface for indirect prompt injection attacks. - Ingestion points: External job descriptions imported via URLs through the
import_job_by_urltool (SKILL.md). - Boundary markers: The instructions lack delimiters or warnings to treat imported job content as untrusted data.
- Capability inventory: Significant capabilities including
apply_to_job,generate_resume_for_job, andsend_outreachare available to process the imported data. - Sanitization: No evidence of sanitization, filtering, or validation for content fetched from remote job boards.
Audit Metadata