{
  "skill_name": "Job Search MCP",
  "skill_path": "/workspace/skills/clawhub-job-search-mcp",
  "skill_directory": "/workspace/skills/clawhub-job-search-mcp",
  "is_safe": true,
  "max_severity": "MEDIUM",
  "findings_count": 2,
  "findings": [
    {
      "id": "llm_finding_Job Search MCP_3",
      "rule_id": "LLM_DATA_EXFILTRATION",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "External Dependency Installation Without Version Pinning",
      "description": "The installation instructions recommend installing dependencies without pinned versions (e.g., 'mcp>=1.1.0', 'python-jobspy>=1.1.82'). This creates supply chain risk as future versions could introduce malicious code or breaking changes.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": "pip install mcp>=1.1.0 python-jobspy>=1.1.82 pandas>=2.1.0 pydantic>=2.0.0",
      "remediation": "Pin exact versions for all dependencies to ensure reproducible and secure installations. Example: 'pip install mcp==1.1.0 python-jobspy==1.1.82 pandas==2.1.0 pydantic==2.0.0'. Document the tested versions explicitly.",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "The Job Search MCP skill is a relatively safe wrapper around the JobSpy MCP server with LOW to MEDIUM severity issues. The skill itself contains no malicious code, prompt injection attempts, or data exfiltration logic. The primary concerns are: (1) missing optional metadata fields that would improve transparency, (2) incomplete documentation, (3) supply chain risks from unpinned dependencies and unverified external repository clones. The skill functions as a documentation/configuration guide rather than executable code, which limits its attack surface. The main risks are indirect - users could install compromised versions of dependencies or clone a malicious repository if the external sources are compromised. No direct security threats (prompt injection, credential theft, command injection) were detected in the skill content itself.",
        "primary_threats": [
          "Supply Chain Risk",
          "Missing Metadata",
          "Incomplete Documentation"
        ],
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "aisubtech": "AISubtech-8.2.3",
        "aisubtech_name": "Data Exfiltration via Agent Tooling",
        "scanner_category": "SECURITY VIOLATION",
        "meta_validated": true,
        "meta_confidence": "HIGH",
        "meta_confidence_reason": "Using minimum version specifiers (>=) allows automatic upgrades to potentially compromised or breaking versions. This is a well-documented supply chain security risk.",
        "meta_exploitability": "Medium - Requires attacker to compromise PyPI package or conduct typosquatting attack",
        "meta_impact": "Medium - Could lead to malicious code execution if dependency is compromised"
      }
    },
    {
      "id": "llm_finding_Job Search MCP_4",
      "rule_id": "LLM_DATA_EXFILTRATION",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "Unverified External Repository Clone",
      "description": "The skill instructs users to clone an external GitHub repository (github.com/chinpeerapat/jobspy-mcp-server) without providing verification mechanisms (commit hash, GPG signature, checksum). This creates supply chain risk as the repository could be compromised or modified after publication.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": "git clone https://github.com/chinpeerapat/jobspy-mcp-server.git",
      "remediation": "Provide a specific commit hash or tag to clone (e.g., 'git clone --branch v1.0.0'), include checksums for verification, or recommend users verify the repository's authenticity before installation. Document the trusted commit hash in the skill manifest.",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "The Job Search MCP skill is a relatively safe wrapper around the JobSpy MCP server with LOW to MEDIUM severity issues. The skill itself contains no malicious code, prompt injection attempts, or data exfiltration logic. The primary concerns are: (1) missing optional metadata fields that would improve transparency, (2) incomplete documentation, (3) supply chain risks from unpinned dependencies and unverified external repository clones. The skill functions as a documentation/configuration guide rather than executable code, which limits its attack surface. The main risks are indirect - users could install compromised versions of dependencies or clone a malicious repository if the external sources are compromised. No direct security threats (prompt injection, credential theft, command injection) were detected in the skill content itself.",
        "primary_threats": [
          "Supply Chain Risk",
          "Missing Metadata",
          "Incomplete Documentation"
        ],
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "aisubtech": "AISubtech-8.2.3",
        "aisubtech_name": "Data Exfiltration via Agent Tooling",
        "scanner_category": "SECURITY VIOLATION",
        "meta_validated": true,
        "meta_confidence": "HIGH",
        "meta_confidence_reason": "Cloning from HEAD without verification allows repository owner or attacker (if account compromised) to inject malicious code after skill publication.",
        "meta_exploitability": "Medium - Requires compromise of GitHub account or repository",
        "meta_impact": "High - Full code execution on user's system during installation"
      }
    }
  ],
  "scan_duration_seconds": 25.70993709564209,
  "duration_ms": 25709,
  "analyzers_used": [
    "static_analyzer",
    "behavioral_analyzer",
    "llm_analyzer",
    "trigger_analyzer",
    "meta_analyzer"
  ],
  "timestamp": "2026-02-06T03:39:53.724283"
}