Skip to content
Back to skills

Jobfishing Setup

DSecurity

Get the jobfishing tools running. Use when the user has just installed the jobfishing plugin, or when the jobfishing MCP tools (crawl_jobs, recommend, list_jobs) are missing, fail to start, or the user says jobfishing is not working or asks how to install it.

  • 3 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added October 9, 2026
ai-agentspythonshellgit

Works with

  • cli
  • mcp

Security analysis

D42/100
  • criticalPipes output to a shell interpreter
  • mediumUses curl or wget to download content
  • criticalDownloads and executes remote scripts — classic supply chain attack

Pro scans all 2 files and shows the line behind each finding

Scanned October 9, 2026

npx -y skills add leoqingyu/jobfishing-ai --skill jobfishing-setup --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Jobfishing Setup?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Jobfishing Setup
[![Security: D — Skills Directory](https://www.skillsdirectory.com/api/skills/leoqingyu-jobfishing-setup/badge)](https://www.skillsdirectory.com/skills/leoqingyu-jobfishing-setup)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: jobfishing-setup
description: Get the jobfishing tools running. Use when the user has just installed the jobfishing plugin, or when the jobfishing MCP tools (crawl_jobs, recommend, list_jobs) are missing, fail to start, or the user says jobfishing is not working or asks how to install it.
---

# jobfishing Setup

The plugin starts its tools with `uvx`, which needs [uv](https://docs.astral.sh/uv/). uv downloads the right Python and all dependencies by itself, so the user installs no Python and runs no `pip`. The first start takes about 10 seconds; after that it is instant.

## Steps

1. Check whether the tools are there: call a jobfishing tool such as `get_local_preferences`. If it works, say jobfishing is ready and stop.
2. Otherwise check `uv --version`.
3. If uv is missing, tell the user in one sentence that jobfishing needs uv, that installing it is one command, and ask for permission. On approval run the official installer:
   - macOS / Linux: `curl -LsSf https://astral.sh/uv/install.sh | sh`
   - Windows (PowerShell): `powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"`
4. Ask the user to restart the agent session (or reload plugins) so the tools start with uv on the PATH, then re-check with `get_local_preferences`.
5. If the tools still fail, run `uvx --from "https://github.com/leoqingyu/jobfishing-ai/archive/refs/heads/main.zip#subdirectory=plugins/jobfishing" jobfishing-mcp` once in a shell, read the error and report it; do not install packages by hand or create another client.

To update jobfishing later: `uvx --refresh --from "https://github.com/leoqingyu/jobfishing-ai/archive/refs/heads/main.zip#subdirectory=plugins/jobfishing" jobfishing-mcp --help`, then restart the session.

## Rules

- Never run an installer without the user's yes.
- jobfishing needs no account for finding and ranking jobs. Mention signing in only if the user wants tracking, applying or the app's own scores.

Files in this skill

  • SKILL.md1.9 KB
  • agents/openai.yaml261 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.