ClawAudit verdict
dice-easy-apply
dice-easy-apply-automation
The skill automates Dice.com Easy Apply searches and applications with Puppeteer/Chromium, with no evidence of malicious or deceptive behavior.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (2)
setuid โ privilege escalation mechanism
SKILL.md ยท code ยท setuid
Accesses process.env โ reads environment variables
SKILL.md ยท code
Permissions & capabilities
No declared permissions โ minimal attack surface.
credential_access Is this flag fair?
Thanks โ recorded.