SkillSpector · jobnet-search

The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.

cli/src/helpers.ts

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

cli/README.md

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

cli/README.md

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

cli/README.md

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

cli/src/commands/occupations.ts

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

cli/package.json

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

cli/package.json

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

cli/package.json

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

cli/package.json

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

cli/package.json