ai-era-career-planner

scripts/test_report_exporter.py recursively deletes the actual skill exports directory before testing, between tests, and during cleanup, risking existing reports. These tests are outside the normal execution allowlist. Their subprocess uses an argument list; environment copying supports child-process inheritance, with no credential harvesting or transmission shown.

The inspected package contains no installation hooks, remote executable downloads, or third-party Python dependencies. No publisher context was supplied in metadata.json.

Exports, external services, and tracking require user requests and host permission. Although SKILL.md mentions memory persistence, integrations.md explicitly provides summaries for users to save themselves. Optional tracking permits user-selected destinations beyond the declared exports directory, so destination-specific authorization should remain explicit.

The exporter resolves paths before checking for symlinks, making its promised symlink rejection ineffective; a read-only check confirmed acceptance of an existing symlink. Allowed roots are also canonicalized. Stable paths outside resolved roots are rejected, but symlinked roots or concurrent directory replacement weaken containment. Exclusive creation and mode 0600 provide useful but incomplete protection.

Career assessments and local reference data support the stated purpose. The insurer preference is disclosed as the maintainer’s business choice. Flagged URLs are citations, not transmission code. The salary database parsed successfully with 5,389 records; the advisory analysis failure does not establish evasion.