Skill Trust Decision
job-agent
纯文档技能包，包含声明的curl|bash远程脚本执行，属于已知的供应链风险模式
Most direct threat evidence
01
AI读取SKILL.md理解功能 Entry · SKILL.md
02
AI执行curl|bash安装命令 Escalation · SKILL.md
03
远程install.sh脚本在用户机器上执行（内容未审查，可能被篡改） Impact · 外部GitHub
Why this conclusion was reached
2/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Block
Attack chain and severe findings
The report includes 3 attack-chain steps and 1 severe findings.
Pass
Dependencies and supply chain hygiene
Dependencies are present but no obvious high-risk issue stands out.
Attack Chain
01
AI读取SKILL.md理解功能
Entry · SKILL.md:1
02
AI执行curl|bash安装命令
Escalation · SKILL.md:43
03
远程install.sh脚本在用户机器上执行（内容未审查，可能被篡改）
Impact · 外部GitHub
What drove the risk score up
curl|bash远程脚本执行 +25
SKILL.md:43 声明的安装命令存在供应链风险，远程脚本可被篡改
无实际代码审查 +10
仅有文档无脚本，无法验证远程脚本实际行为
依赖外部CLI工具 +10
jobagent为外部闭源工具，实际能力无法审计
Most important evidence
High Supply Chain
远程脚本执行供应链风险
安装命令使用curl|bash模式从外部GitHub仓库拉取并执行install.sh脚本，该脚本内容未经过审查且可随时被修改，属于典型的供应链攻击向量
SKILL.md:43 应要求维护者提供本地脚本或预编译二进制文件，使用包管理器安装而非管道执行远程脚本
Medium Doc Mismatch
外部CLI工具能力不可审计
Skill声称操作招聘平台但实际执行jobagent闭源CLI，该CLI的实际行为（可能的后台数据收集、凭证外传等）无法通过代码审查验证
SKILL.md:5 如jobagent为开源项目，应引用其源码仓库；如为闭源，需评估供应商信任度
Low Supply Chain
PowerShell远程脚本执行
Windows安装同样使用irm|iex从远程URL拉取并执行脚本
SKILL.md:47 同curl|bash，建议本地化安装
Declared capability vs actual capability
Filesystem Pass
Declared NONE
→ Inferred READ
SKILL.md:51-71 读取用户简历文件进行解析 Network Pass
Declared READ
→ Inferred READ
SKILL.md:5 调用jobagent API访问招聘平台 Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:43-45 执行jobagent CLI命令 Suspicious artifacts and egress
Critical Dangerous Command
curl -fsSL https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh | bash SKILL.md:43
Medium External URL
https://jobagent.agentmesh360.com/ SKILL.md:8
Medium External URL
https://agentmesh360.com/app/ SKILL.md:24
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| jobagent | unknown | external_cli | No | 闭源CLI工具，实际行为不可审计 |
File composition
1 files · 120 lines
Markdown 1 files · 120 lines
Files of concern · 1
SKILL.md 远程脚本执行供应链风险 · 外部CLI工具能力不可审计 · PowerShell远程脚本执行 · curl -fsSL https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh | bash · https://jobagent.agentmesh360.com/ · https://agentmesh360.com/app/
Security positives
文档结构完整，声明清晰
所有shell操作均已在文档中声明
无阴影功能（未发现代码中做文档没说的事）
无凭证收割或数据外泄的直接证据
明确的安全契约要求用户提供真实API密钥