liepin-jobs
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile provides instructions to download theliepin_mcp.pyscript from theTerminalSkillsorganization's repository on GitHub. This script is the core component for interacting with the platform and is maintained by the skill's authoring organization. - [INDIRECT_PROMPT_INJECTION]: The skill ingests job listings and resume data from the Liepin platform, which creates an attack surface where malicious instructions could be embedded in job descriptions to influence the agent's behavior.
- Ingestion points: Data retrieved via the
user-search-jobandmy-resumecommands from the Liepin MCP server. - Boundary markers: Absent; external data from the platform is presented in the agent's context without specific delimiters or warnings.
- Capability inventory: The skill has the ability to search for jobs, apply to positions, and update resume data.
- Sanitization: None; the script retrieves and displays content directly from the Liepin API without filtering potential injection patterns.
Audit Metadata