Skill Trust Decision
job-agent
Job Agent CLI 包装器通过 curl|bash 从第三方 GitHub 源执行远程安装脚本，存在供应链攻击风险但文档已声明
Most direct threat evidence
01
用户阅读 SKILL.md 安装说明 Entry · SKILL.md
02
执行 curl|bash 从第三方 GitHub 源下载安装脚本 Escalation · SKILL.md
03
安装脚本在本地以 shell 权限执行，可能植入后门或窃取凭证 Impact · https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh
Why this conclusion was reached
2/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Block
Attack chain and severe findings
The report includes 3 attack-chain steps and 1 severe findings.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
Attack Chain
01
用户阅读 SKILL.md 安装说明
Entry · SKILL.md:65
02
执行 curl|bash 从第三方 GitHub 源下载安装脚本
Escalation · SKILL.md:65
03
安装脚本在本地以 shell 权限执行，可能植入后门或窃取凭证
Impact · https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh:1
What drove the risk score up
远程脚本执行 +30
curl|bash 从 GitHub 下载并直接执行安装脚本，未在本地验证
供应链风险 +15
依赖第三方 GitHub 源 (jiyangnan/AgentMesh-JobAgent)，无版本锁定机制
Most important evidence
High Supply Chain
远程脚本执行 (curl|bash)
安装说明包含从 raw.githubusercontent.com 下载远程脚本并通过管道直接执行，属于典型供应链攻击向量
SKILL.md:65 建议用户先手动审查 install.sh 内容，或使用官方分发渠道
Medium Supply Chain
Windows 远程脚本执行 (irm|iex)
PowerShell 安装同样使用远程脚本执行模式
SKILL.md:70 建议使用已验证的本地安装包或包管理器安装
Low Doc Mismatch
能力声明与实际不符
SKILL.md 声称只是 'Drive the official Job Agent CLI'，但实际上需要通过远程脚本执行安装二进制工具
SKILL.md:1 明确声明需要安装和 shell 执行权限
Declared capability vs actual capability
Filesystem Pass
Declared NONE
→ Inferred READ
SKILL.md:1 仅声明为 CLI 包装器 Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:65-70 安装命令需要 shell 执行权限 Suspicious artifacts and egress
Critical Dangerous Command
curl -fsSL https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh | bash SKILL.md:65
Medium External URL
https://jobagent.agentmesh360.com/ SKILL.md:8
Medium External URL
https://agentmesh360.com/app/ SKILL.md:24
Dependencies and supply chain
There are no structured dependency warnings.
File composition
1 files · 160 lines
Markdown 1 files · 160 lines
Files of concern · 1
SKILL.md 远程脚本执行 (curl|bash) · Windows 远程脚本执行 (irm|iex) · 能力声明与实际不符 · curl -fsSL https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh | bash · https://jobagent.agentmesh360.com/ · https://agentmesh360.com/app/
Security positives
纯文档型 Skill，无实际执行代码
功能明确为合法求职辅助工具
包含详细的安全操作契约和凭证管理规范
CLI 命令完整，用户可自行验证命令来源