job-seeker: Skill for Claude Code

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

• high YARA Match · line 17
  YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).
  Fix: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise.
• medium MCP Rug Pull · line 37
  npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
  Fix: Pin the version: npx @scope/[email protected]
• medium MCP Rug Pull · line 96
  npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
  Fix: Pin the version: npx @scope/[email protected]
• medium Prompt Injection · line 151
  Subtle instructions detected that may alter agent decision-making or introduce hidden biases.
  Fix: Review content for implicit steering or bias. Ensure instructions are explicit and align with the skill's stated purpose.
• medium Memory Poisoning · line 170
  Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.
  Fix: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.
• medium Rogue Agent · line 222
  Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
  Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.