santifer/career-ops hook server skill
job search automation
career-ops is an AI-powered job search system that automates evaluating job offers, generating tailored resumes, and tracking applications. It runs on any AI coding CLI (Claude Code, OpenCode, etc.) and uses web automation to scan job portals, score opportunities across multiple dimensions, and provide research-backed guidance throughout the hiring pipeline.
Evaluate job listings at scale — paste a URL to get structured scoring, ATS-optimized PDF resume, and tracker entry Generate personalized application materials — tailored CVs, cover letters, and recruiter emails from each job description Build reusable interview prep — accumulate STAR stories and negotiation frameworks as you evaluate opportunities Scan job portals automatically — pre-configured searches across 100+ companies (Anthropic, OpenAI, etc.) plus Ashby, Greenhouse, Lever Analyze your pipeline — detect reposts, flag ghost jobs, calculate follow-up cadence, and review rejection patterns 2 CRITICAL✓ 1 HIGH✓ 28 MEDIUM 3 LOW 1 INFO
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 1 confirmed (33%) 2 likely real (67%) 1 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 3 high-signal, 1 mostly false-positive (hidden by default)
CHK-074 1 finding 1 likely
0% FP CHK-089 1 finding 1 confirmed
0% FP CHK-129 1 finding 1 likely
0% FP ▼ Show 1 checker that are mostly false positives (1 findings) 35 findings click to expand
CHK-074 Permission bypass documented — Claude Code runs without user confirmation
batch/batch-runner.sh
AI: likely real confirmed ▼
CHK-089 --dangerously-skip-permissions in executable — all permission checks bypassed
batch/batch-runner.sh
AI: confirmed confirmed ▼
CHK-129 Sensitive field in return type/schema — "token"
web/src/lib/apply/greenhouse.ts
AI: likely real likely ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in plugin-audit.mjs
plugin-audit.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in tracker.mjs
tracker.mjs
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in build-dashboard.mjs
build-dashboard.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in test-all.mjs
test-all.mjs
possible ▼
CHK-115 Credential file path referenced in skill content: .env`
plugins/notion/skill.md
possible ▼
CHK-115 Credential file path referenced in skill content: .env`
plugins/apify/skill.md
possible ▼
CHK-115 Credential file path referenced in skill content: .env`
plugins/gmail/skill.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in plugin-install.mjs
plugin-install.mjs
possible ▼
CHK-125 eval() — arbitrary code execution — no scope constraint in archive-posting.mjs
archive-posting.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in agent-inbox.mjs
agent-inbox.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in merge-tracker.mjs
merge-tracker.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in application-answers.mjs
application-answers.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in update-system.mjs
update-system.mjs
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in DOCKER.md
DOCKER.md
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in reply-watch.mjs
reply-watch.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in providers/hecklerkoch.mjs
providers/hecklerkoch.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in providers/dassault.mjs
providers/dassault.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in providers/deutschebahn.mjs
providers/deutschebahn.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in providers/avature.mjs
providers/avature.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in providers/successfactors.mjs
providers/successfactors.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in providers/softgarden.mjs
providers/softgarden.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in lib/latex-content.mjs
lib/latex-content.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in gmail/_helpers.mjs
plugins/gmail/_helpers.mjs
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in components/assistant-console.tsx
web/src/components/assistant-console.tsx
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in lib/career-ops.ts
web/src/lib/career-ops.ts
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in logo/route.ts
web/src/app/api/logo/route.ts
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in version/route.ts
web/src/app/api/version/route.ts
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in core/portals.ts
web/src/lib/core/portals.ts
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in test-all.mjs
test-all.mjs
possible ▼
CHK-125c XMLHttpRequest — unconstrained HTTP — no scope constraint in plugin-audit.mjs
plugin-audit.mjs
possible ▼
CHK-131 [postinstall] Install hook present — review required
package.json
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
config/profile.example.yml
possible ▼
▼ Show 1 false positive (3% of this view) Last scanned: Jul 11, 2026
More servers
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
skypilot-org/skypilot 85
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.