Skill Trust Decision
job-agent
This is a documentation-only skill that instructs the AI to invoke the jobagent CLI, but the undeclared shell:WRITE requirement and remote install pattern present notable concerns despite partial risk acknowledgment.
Why this conclusion was reached
2/4 dimensions flagged Block
Declared vs actual capability
3 undeclared or violating capabilities were inferred.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
What drove the risk score up
Undeclared shell execution +10
SKILL.md instructs the AI to run Bash commands (jobagent doctor env, jobagent round start, etc.) but declares no allowed-tools, creating a doc-to-capability mismatch
Remote script download and execution +10
curl|bash installer from GitHub raw URL on line 53; partially acknowledged in skill-card.md but risk remains
No implementation code present +-5
Skill is purely guidance text; no embedded malicious code found in the distributed skill artifact
Most important evidence
Medium Doc Mismatch
Undeclared shell execution requirements
SKILL.md frontmatter declares allowed-tools: none but the skill body explicitly instructs the AI to run Bash commands (jobagent doctor env, jobagent round start, jobagent <platform> login --check, etc.) across dozens of lines. This is a doc-to-capability mismatch.
SKILL.md:1 Declare allowed-tools: [Bash] or equivalent shell:WRITE if the AI is expected to invoke jobagent CLI commands. The skill effectively requires this capability.
Medium Supply Chain
Remote script download via curl|bash
Line 53 contains 'curl -fsSL https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh | bash' — a well-known risky pattern that fetches and executes arbitrary code from a remote URL. The Windows variant uses 'irm ... | iex' with the same risk.
SKILL.md:53 Pin the installer to a specific tagged release with a hash verification step. Prefer pre-installed CLI delivery or require users to clone and inspect the repo manually before execution.
Low Doc Mismatch
Missing filesystem:READ declaration for resume file access
SKILL.md references 'jobagent resume analyze --file <resume-path>' which implies reading local resume files, but no filesystem:READ is declared in allowed-tools.
SKILL.md:66 Add filesystem:READ to declared capabilities if the AI will handle resume file paths.
Declared capability vs actual capability
Shell Block
Declared NONE
→ Inferred WRITE
SKILL.md instructs Bash execution of jobagent CLI commands throughout without declared allowed-tools Filesystem Block
Declared NONE
→ Inferred READ
SKILL.md references reading resume files (--file <resume-path>) and output review files without filesystem:READ declaration Skill Invoke Block
Declared NONE
→ Inferred READ
SKILL.md is itself a skill-invoke document, instructing the AI to call the jobagent CLI as a subprocess Suspicious artifacts and egress
Critical Dangerous Command
curl -fsSL https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh | bash SKILL.md:53
Medium External URL
https://jobagent.agentmesh360.com/ SKILL.md:8
Medium External URL
https://agentmesh360.com/app/ SKILL.md:24
Medium External URL
https://clawhub.ai/user/jiyangnan skill-card.md:7
Medium External URL
https://clawhub.ai/jiyangnan/skills/job-agent skill-card.md:31
Dependencies and supply chain
There are no structured dependency warnings.
File composition
3 files · 191 lines
Markdown 2 files · 186 linesJSON 1 files · 5 lines
Files of concern · 2
SKILL.md Undeclared shell execution requirements · Remote script download via curl|bash · Missing filesystem:READ declaration for resume file access · curl -fsSL https://raw.githubusercontent.com/jiyangnan/AgentMesh-JobAgent/main/scripts/install.sh | bash · https://jobagent.agentmesh360.com/ · https://agentmesh360.com/app/
skill-card.md https://clawhub.ai/user/jiyangnan · https://clawhub.ai/jiyangnan/skills/job-agent
Other files · _meta.json
Security positives
MIT-0 license with publicly verifiable open-source repository
Risks partially acknowledged in skill-card.md under Known Risks and Mitigations
No embedded code, obfuscation, or base64 payloads found
No credential harvesting, environment variable iteration, or sensitive path access
No C2 communication, reverse shell, or data exfiltration patterns
Skill is purely guidance/documentation; no runtime execution risk from the skill artifact itself