Scan Report
5 /100
jobs-hunter-claw
Unified job hunting automation with Google Sheets integration
Legitimate job hunting automation tool with Google Sheets integration. All functionality is accurately documented with no hidden malicious behavior detected.
Safe to install
This skill is safe to use. Ensure the gog CLI is installed from a trusted source and review Google Sheets sharing permissions.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Shell | WRITE | WRITE | ✓ Aligned | job-tracker.sh uses bash for gog CLI operations |
| Network | READ | READ | ✓ Aligned | gog sheets get/update/append for Google Sheets API |
| Filesystem | NONE | NONE | — | No file read/write operations; uses environment variables for config |
| Environment | READ | READ | ✓ Aligned | Reads JOB_TRACKER_SPREADSHEET_ID env var |
12 findings
Medium External URL 外部 URL
https://clawhub.ai/QuantDeveloperUSA/jobs-hunter-claw README.md:5 Medium External URL 外部 URL
https://docs.google.com/spreadsheets/d/[THIS-IS-THE-ID README.md:41 Medium External URL 外部 URL
https://gogcli.sh README.md:65 Medium External URL 外部 URL
https://docs.google.com/spreadsheets/d/your-sheet-id SKILL.md:181 Medium External URL 外部 URL
https://linkedin.com/jobs/view/123456 SKILL.md:276 Medium External URL 外部 URL
https://contacts.google.com/person/c[alphanumeric SKILL.md:378 Medium External URL 外部 URL
https://sheets.google.com references/google-sheet-setup.md:7 Medium External URL 外部 URL
https://docs.google.com/spreadsheets/d/[SPREADSHEET_ID references/google-sheet-setup.md:12 Medium External URL 外部 URL
https://contacts.google.com/person/c123456789 scripts/job-tracker-appscript.js:214 Medium External URL 外部 URL
https://contacts\.google\.com/person/c[a-zA-Z0-9 scripts/job-tracker.sh:60 Medium External URL 外部 URL
https://contacts.google.com/person/c... scripts/job-tracker.sh:175 Info Email 邮箱地址
[email protected] SKILL.md:57 File Tree
5 files · 58.5 KB · 2077 lines Shell 1f · 847L
Markdown 3f · 682L
JavaScript 1f · 548L
├─
▾
references
│ └─
google-sheet-setup.md
Markdown
├─
▾
scripts
│ ├─
job-tracker-appscript.js
JavaScript
│ └─
job-tracker.sh
Shell
├─
README.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Documentation accurately describes all functionality - no doc-to-code mismatch
✓ All operations are via gog CLI (trusted Google Sheets tool)
✓ No credential harvesting - only reads spreadsheet ID from env var
✓ No base64, eval, or obfuscation patterns detected
✓ No network calls to external IPs - only Google Sheets API
✓ No sensitive file access (~/.ssh, ~/.aws, .env)
✓ No data exfiltration - only stores data in user's own Google Sheet
✓ Python subprocess used only for legitimate JSON handling
✓ Google Apps Script is sandboxed by Google's security model
✓ No cron/scheduled task installation - cron setup is documented for user configuration only