📦
Audit History
dice-easy-apply - 4 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 4 Latest
Jul 5, 2026, 08:03 PM
Most external-command findings are false positives from Markdown fences, inline code, or JavaScript template literals. Confirmed risks include Dice.com network automation, persistent browser state, shared temp-directory logging, and Chromium launch flags that disable sandboxing. The skill also has contextual privacy risk because it can upload resume documents and submit job applications.
1
Files scanned
197
Lines analyzed
17
Review items
0
False positives ignored
Confirmed security concerns (3)
High
UID/GID manipulation
args: ['--no-sandbox', '--disable-setuid-sandbox', '--disable-dev-shm-usage', '--start-maximized']
The Puppeteer launch arguments include --no-sandbox and --disable-setuid-sandbox. This disables important Chromium sandbox protections while browsing third-party pages.
Medium
Automated Third-Party Job Submission
The skill instructs agents to use Dice Easy Apply flows, upload resume or cover-letter PDFs, and submit applications. This can transmit personal data and perform account actions on a third-party service.
The workflow explicitly covers Easy Apply use, verified resume upload, optional cover-letter upload, and submission. The risk is contextual rather than a simple code pattern.
Medium
Persistent Authenticated Browser Profile
The skill recommends a persistent Chromium profile so login can be performed once and reused. This may retain cookies and authenticated session state on disk.
The file states that a persistent browser profile is used for manual login reuse and shows the profile path in configuration. Session persistence is the intended behavior.
Capability review items (10)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Hidden file access
CHROME_PROFILE=$HOME/.cache/dice-chrome
The skill stores or reuses a Chromium profile under $HOME/.cache/dice-chrome. A persistent profile can retain session cookies and account state on disk.
Medium
Hidden file access
userDataDir: process.env.CHROME_PROFILE || `${process.env.HOME}/.cache/dice-chrome`,
The skill stores or reuses a Chromium profile under $HOME/.cache/dice-chrome. A persistent profile can retain session cookies and account state on disk.
Medium
Temp directory access
STATE_DIR=/tmp/dice-easyapply-daily
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Medium
Temp directory access
/tmp/dice-easyapply-daily/state.json
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Medium
Temp directory access
/tmp/dice-easyapply-daily/results.jsonl
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Medium
Temp directory access
State: /tmp/dice-easyapply-daily/state.json
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Medium
Temp directory access
Log: /tmp/dice-easyapply-daily/results.jsonl
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Low
Hardcoded URL
https://www.dice.com/jobs?filters.workplaceTypes=Remote&filters.easyApply=true&q=<QUERY>
The skill hardcodes Dice.com URLs for search and application workflows. This is expected for the skill, but it is real third-party network activity tied to job applications.
Low
Hardcoded URL
https://www.dice.com/jobs?filters.easyApply=true&filters.employmentType=CONTRACTS&filters.employerTy
The skill hardcodes Dice.com URLs for search and application workflows. This is expected for the skill, but it is real third-party network activity tied to job applications.
Low
Hardcoded URL
https://www.dice.com/job-applications/<job-id>/wizard
The skill hardcodes Dice.com URLs for search and application workflows. This is expected for the skill, but it is real third-party network activity tied to job applications.
Risk Factors
⚙️ External commands (32)
SKILL.md:50-52 SKILL.md:52-56 SKILL.md:56-58 SKILL.md:58-62 SKILL.md:62-77 SKILL.md:77-81 SKILL.md:81-92 SKILL.md:92-96 SKILL.md:96-102 SKILL.md:102-115 SKILL.md:115-121 SKILL.md:121-124 SKILL.md:124-128 SKILL.md:128-133 SKILL.md:133-135 SKILL.md:135-146 SKILL.md:146-153 SKILL.md:153-157 SKILL.md:157-160 SKILL.md:160-166 SKILL.md:166-167 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170-171 SKILL.md:171-172 SKILL.md:172-173 SKILL.md:173-179 SKILL.md:179-188 SKILL.md:188-193 SKILL.md:193-194 SKILL.md:194
🌐 Network access (3)
📁 Filesystem access (7)
🔑 Env variables (4)
Detected Patterns
UID/GID manipulation
Audited by: codex
Jul 5, 2026, 08:03 PM
Most external-command findings are false positives from Markdown fences, inline code, or JavaScript template literals. Confirmed risks include Dice.com network automation, persistent browser state, shared temp-directory logging, and Chromium launch flags that disable sandboxing. The skill also has contextual privacy risk because it can upload resume documents and submit job applications.
1
Files scanned
197
Lines analyzed
17
Review items
0
False positives ignored
Confirmed security concerns (3)
High
UID/GID manipulation
args: ['--no-sandbox', '--disable-setuid-sandbox', '--disable-dev-shm-usage', '--start-maximized']
The Puppeteer launch arguments include --no-sandbox and --disable-setuid-sandbox. This disables important Chromium sandbox protections while browsing third-party pages.
Medium
Automated Third-Party Job Submission
The skill instructs agents to use Dice Easy Apply flows, upload resume or cover-letter PDFs, and submit applications. This can transmit personal data and perform account actions on a third-party service.
The workflow explicitly covers Easy Apply use, verified resume upload, optional cover-letter upload, and submission. The risk is contextual rather than a simple code pattern.
Medium
Persistent Authenticated Browser Profile
The skill recommends a persistent Chromium profile so login can be performed once and reused. This may retain cookies and authenticated session state on disk.
The file states that a persistent browser profile is used for manual login reuse and shows the profile path in configuration. Session persistence is the intended behavior.
Capability review items (10)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Hidden file access
CHROME_PROFILE=$HOME/.cache/dice-chrome
The skill stores or reuses a Chromium profile under $HOME/.cache/dice-chrome. A persistent profile can retain session cookies and account state on disk.
Medium
Hidden file access
userDataDir: process.env.CHROME_PROFILE || `${process.env.HOME}/.cache/dice-chrome`,
The skill stores or reuses a Chromium profile under $HOME/.cache/dice-chrome. A persistent profile can retain session cookies and account state on disk.
Medium
Temp directory access
STATE_DIR=/tmp/dice-easyapply-daily
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Medium
Temp directory access
/tmp/dice-easyapply-daily/state.json
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Medium
Temp directory access
/tmp/dice-easyapply-daily/results.jsonl
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Medium
Temp directory access
State: /tmp/dice-easyapply-daily/state.json
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Medium
Temp directory access
Log: /tmp/dice-easyapply-daily/results.jsonl
The skill directs state and results to /tmp/dice-easyapply-daily. Job history in a shared temp directory can expose workflow data or collide with other users.
Low
Hardcoded URL
https://www.dice.com/jobs?filters.workplaceTypes=Remote&filters.easyApply=true&q=<QUERY>
The skill hardcodes Dice.com URLs for search and application workflows. This is expected for the skill, but it is real third-party network activity tied to job applications.
Low
Hardcoded URL
https://www.dice.com/jobs?filters.easyApply=true&filters.employmentType=CONTRACTS&filters.employerTy
The skill hardcodes Dice.com URLs for search and application workflows. This is expected for the skill, but it is real third-party network activity tied to job applications.
Low
Hardcoded URL
https://www.dice.com/job-applications/<job-id>/wizard
The skill hardcodes Dice.com URLs for search and application workflows. This is expected for the skill, but it is real third-party network activity tied to job applications.
Risk Factors
⚙️ External commands (32)
SKILL.md:50-52 SKILL.md:52-56 SKILL.md:56-58 SKILL.md:58-62 SKILL.md:62-77 SKILL.md:77-81 SKILL.md:81-92 SKILL.md:92-96 SKILL.md:96-102 SKILL.md:102-115 SKILL.md:115-121 SKILL.md:121-124 SKILL.md:124-128 SKILL.md:128-133 SKILL.md:133-135 SKILL.md:135-146 SKILL.md:146-153 SKILL.md:153-157 SKILL.md:157-160 SKILL.md:160-166 SKILL.md:166-167 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170-171 SKILL.md:171-172 SKILL.md:172-173 SKILL.md:173-179 SKILL.md:179-188 SKILL.md:188-193 SKILL.md:193-194 SKILL.md:194
🌐 Network access (3)
📁 Filesystem access (7)
🔑 Env variables (4)
Detected Patterns
UID/GID manipulation
Audited by: codex
Jun 30, 2026, 10:52 AM
The static analyzer over-reported Markdown backticks as Ruby shell execution, and those specific findings are false positives. The skill still has medium operational risk because it directs agents to browse Dice.com with Puppeteer, reuse a persistent authenticated Chromium profile, upload personal resume files, write state logs, and launch Chromium with sandbox-disabling flags.
1
Files scanned
197
Lines analyzed
9
Review items
1
False positives ignored
Confirmed security concerns (1)
Medium
Authenticated Job Application Automation
The skill instructs agents to use Dice Easy Apply, upload a verified resume and cover letter, continue to review, and submit applications. This is legitimate for the stated purpose, but it can disclose personal information or submit applications without sufficient human review if operators do not keep the guardrails.
The lines explicitly describe Easy Apply submission and document upload. The risk is operational and privacy-related rather than confirmed malicious intent.
Capability review items (4)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Chromium Sandbox Disabled
The Puppeteer launch arguments include --no-sandbox and --disable-setuid-sandbox while browsing third-party web pages. These flags reduce Chromium process isolation and increase impact if a visited page exploits the browser process.
The sandbox-disabling flags are directly visible in the launch example. They are common in containers, but still materially reduce browser isolation.
Medium
Persistent Profile and State Files Retain Sensitive Context
The workflow recommends a persistent Chromium profile plus state and log files under a temporary directory. These files may retain login session artifacts, application history, job URLs, and document-use metadata if permissions and cleanup are not managed.
The skill explicitly recommends a persistent browser profile and local state/log paths. The content also warns against credential storage, so this is a cautionary risk, not evidence of theft.
Low
Expected Dice.com Network Targets
The hardcoded URLs point to Dice.com search and job-application pages that match the skill purpose. No evidence found of unrelated endpoints, webhook delivery, encoded payload exfiltration, or covert network destinations.
The domains and paths are consistent with Dice job search and application flows. This supports dismissing the hardcoded URL findings as expected network use.
Low
Environment Variables Used for Local Configuration
The environment variable examples configure document paths, browser binary path, profile path, search limits, and dry-run settings. No evidence found that environment variables are sent to an external service or used to collect secrets.
The environment access appears limited to local configuration for Puppeteer and file selection. The same file explicitly says credentials should not be stored in scripts or logs.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Low
False Positive: Markdown Backticks Reported as Shell Execution
The static analyzer flagged many Markdown code fences and inline code spans as Ruby shell backtick execution. The reviewed file contains documentation examples, URLs, JavaScript, bash snippets, and inline labels; no Ruby backtick execution was found.
The cited locations are Markdown fences or inline code examples, not executable Ruby source. This directly explains the bulk of the external_commands static findings.
Risk Factors
⚙️ External commands (1)
🌐 Network access (3)
📁 Filesystem access (5)
🔑 Env variables (1)
Detected Patterns
Browser Automation Against Authenticated Third-Party SitePersonal Document Upload Workflow
Audited by: codex
Apr 30, 2026, 12:25 PM
This skill automates Dice.com job applications using Puppeteer browser automation. Static analysis flagged 59 potential issues, many of which are false positives from the documentation format. Actual security concerns include environment variable access for file paths, temporary file usage, and platform ToS compliance. The skill is not malicious but presents elevated risk due to automated job application behavior that may trigger account penalties on Dice.com.
1
Files scanned
197
Lines analyzed
10
Review items
1
False positives ignored
Capability review items (6)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Environment Variable Access for Sensitive File Paths
The skill references environment variables (RESUME_PDF, COVER_PDF, CHROME_PROFILE) that point to sensitive user files. While the skill explicitly warns against storing credentials in scripts, the design requires these environment variables to be set with paths to private documents.
Environment variables pointing to user files (resume, cover letter) are legitimate configuration patterns, but improper handling could expose sensitive documents.
Medium
Temporary Directory File Operations
The skill writes state and log files to /tmp directories which have predictable paths and are accessible to other processes on multi-tenant systems.
Using /tmp for state files is a common pattern but creates potential data leakage risk on shared systems.
Medium
External Command Execution via Test Commands
Bash test commands are used to verify file existence before processing. While hardcoded, this pattern enables shell command execution.
The test commands are for file validation and not directly user-controllable, but the pattern enables command execution.
Medium
Browser Automation with Chromium
Puppeteer launches a visible Chromium browser instance with sandbox disabled for container compatibility. This reduces browser isolation.
The --disable-setuid-sandbox flag is common for containerized environments but reduces security boundaries.
Low
Network Access - Job Board URLs
The skill accesses Dice.com URLs for job searches and applications. This is expected behavior for a job automation tool, not credential exfiltration.
Accessing job board URLs is the intended functionality of this skill, not network-based credential theft.
Low
Hidden File Access - Chrome Profile Directory
The skill accesses ~/.cache/dice-chrome for persistent browser login state. This is a standard pattern for browser automation requiring manual authentication.
Chrome profile storage in ~/.cache is standard behavior; the skill uses this for credential-free authentication.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Low
Static Analysis False Positives - Documentation Format
The static analyzer flagged 'Ruby/shell backtick execution' at multiple lines in SKILL.md, but this is a Markdown documentation file containing example code snippets, not executable Ruby code. The backtick pattern detection was triggered by code fence formatting.
SKILL.md is a documentation file; no backtick command execution exists. Static scanner misidentified code fences as execution patterns.
Risk Factors
📁 Filesystem access (4)
🔑 Env variables (3)
⚙️ External commands (1)
🌐 Network access (3)
Audited by: claude