Remote Jobs Finder

Fully conversational remote job finder for WhatsApp powered by Remote Rocketship. Uses rr_jobs_search tool (server-side RR_API_KEY) and supports pagination (...

This skill appears to be what it says: a conversational job-finder that requires a server-side RR_API_KEY. Before installing, review and do the following: 1) Inspect the included extension files (index.ts/openclaw.plugin.json) — they are small and understandable; they only POST to https://www.remoterocketship.com/api/openclaw/jobs and return the response. 2) Only set RR_API_KEY if you trust the Remote Rocketship account and rotate/revoke keys as needed; store it in the systemd service environment as instructed and restrict access to the host. 3) If you require automatic periodic monitoring (hourly/daily), plan to run a scheduler or add server-side code — the bundle does not include a persistent polling service. 4) Install the files from a trusted source (the GitHub repo link in SKILL.md) and verify future updates come from that repo to avoid supply-chain risks. 5) Run the extension on an isolated host or with appropriate host-level permissions if you’re concerned about key exposure. If you want, I can point out the exact lines in index.ts that send the API key and the HTTP request so you can show them to an admin.

Type: OpenClaw Skill Name: remote-jobs-finder Version: 1.6.2 The skill bundle is designed to integrate OpenClaw with the Remote Rocketship job search service. All files, including the `SKILL.md` (agent instructions), `install-server.sh` script, and `index.ts` extension code, align with the stated purpose. The `SKILL.md` contains strong guardrails, explicitly forbidding the agent from making raw HTTP calls, asking users for secrets, or deviating from the job search task. The `index.ts` securely retrieves the `RR_API_KEY` from environment variables and makes API calls only to the legitimate `https://www.remoterocketship.com/api/openclaw/jobs` endpoint. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to harm the user or the system.