Skills/ClawHub/job-application-agent

job-application-agent@3.8.1

CAUTION

Publisher claims: "JobAppAgent, the open-source AI job application agent. Finds, evaluates, fills, submits (only with the candidate's approval), and tracks a candidate's own job applications using a verified resume, evidence-based targeting, secure local profile storage, and browser automation. Use only when the user names JobAppAgent or job-application-agent, or explicitly asks for a job-search or job-application task, such as onboarding or migrating their job-search profile, searching for jobs, assessing a job posting, applying to a specific job URL or batch, recording an application outcome, or reviewing their applications. Do not use for vague or general requests, general career advice, or other browser or form automation." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher vaibhavarora14 · joined 1 days agoInstalls 322Last detonated 27 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsscripts/assessment-guard.mjs:178 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Credential pass-through configurationreferences/ANALYTICS.md:30 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Access to sensitive file pathsscripts/ats/apply-url-gate.mjs:141 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Credential pass-through configurationreferences/SOURCES.md:63 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Credential pass-through configurationreferences/ANALYTICS.md:33 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Access to sensitive file pathsscripts/ats/apply-url-gate.mjs:151 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/assessment-guard.mjs:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/outreach-cli.mjs:72 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/attention-resume-submit.mjs:314 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/source-community-client.mjs:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/telemetry-client.mjs:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/secret-store.mjs:232 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/source-community-client.mjs:241 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/outreach-round.mjs:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/ats/apply-url-gate.mjs:175 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/secret-store.mjs:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/job-application.mjs:274 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/outreach-round.mjs:219 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/prove-apply.mjs:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/source-community-client.mjs:235 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/source-community-client.mjs:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/captcha-vendor.mjs:632 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/cloud-state-client.mjs:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/job-application.mjs:162 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/attention-resume-submit.mjs:154 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/telemetry-client.mjs:156 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/cloud-state-client.mjs:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/outreach-cli.mjs:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/job-application.mjs:276 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/prove-apply.mjs:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/session-binding.mjs:344 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/attention-resume-submit.mjs:151 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/attention-runner-poll.mjs:304 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Privileged sudo commandscripts/secret-store.mjs:138 · Privileged sudo command — agent may execute with elevated privileges
AST05
CRITICAL
Access to sensitive file pathsscripts/update-check.mjs:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/source-community-client.mjs:287 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/cloud-state-client.mjs:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Privileged sudo commandscripts/secret-store.mjs:119 · Privileged sudo command — agent may execute with elevated privileges
AST05
CRITICAL
Access to sensitive file pathsscripts/attention-runner-poll.mjs:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/telemetry-client.mjs:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/telemetry-client.mjs:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/telemetry-client.mjs:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/captcha-vendor.mjs:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/secret-store.mjs:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/secret-store.mjs:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageplatforms.json:39 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageplatforms.json:2 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionscripts/telemetry-client.mjs:503 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathsscripts/update-check.mjs:74 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressscripts/review-page.mjs:292 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
npx invocation of non-well-known packageplatforms.json:11 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Auto-update or dynamic fetch configurationscripts/update-check.mjs:13 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
npx invocation of non-well-known packageSKILL.md:18 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Auto-update or dynamic fetch configurationscripts/update-check.mjs:52 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
File permission modification commandscripts/update-check.mjs:5 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
URL using raw IP addressscripts/telemetry-client.mjs:12 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressscripts/review-page.mjs:292 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressscripts/telemetry-client.mjs:12 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packagescripts/update-check.mjs:13 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Auto-update or dynamic fetch configurationscripts/update-check.mjs:88 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
npx invocation of non-well-known packagescripts/update-check.mjs:12 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageplatforms.json:26 · npx invocation of non-well-known package — may execute untrusted code
AST06