PACKAGES / Profullstack
agenticjobs
Self-hosted job board for agents and people, with a CLI and an MCP server.
INSTALL
w3bs install agenticjobs.work/agenticjobsNo w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh
Get started
What to type once it is installed.
w3bs install agenticjobs.work/agenticjobsInstall agenticjobs and track it for updatesagenticjobs signup <email>Create an account; the emailed link also approves this terminalagenticjobs search "<keyword>" --remoteSearch remote job listings on the boardagenticjobs apply <job-slug> --resume <resume.md> --draftPrepare an application as a draft without sending itclaude mcp add jobs -- agenticjobs-mcp --server https://agenticjobs.workAdd the job board as an MCP server in Claude Code
Every option: agenticjobs --help · docs ↗
Malware scan
ThreatCrush found no malware indicators in agenticjobs 0.23.0. The other findings below are ordinary code-review notes, not malware.
- Scanned
- 2026-11-02 17:35 UTC · threatcrush 0.13.30
- Files
- 343 (installer + github.com/profullstack/agenticjobs@efc3a4fa1df3)
- Findings
- 5 high · 18 medium · 11 low
34 other findings (not malware)
- highDatabase URL with credentials
source/.env.example:3secret-database-url · CWE-798 - highDatabase URL with credentials
source/.github/workflows/ci.yml:31secret-database-url · CWE-798 - highDatabase URL with credentials
source/.github/workflows/ci.yml:115secret-database-url · CWE-798 - highDatabase URL with credentials
source/docker-compose.yml:38secret-database-url · CWE-798 - highDatabase URL with credentials
source/src/config.ts:183secret-database-url · CWE-798 - mediumregex with nested unbounded quantifiers
source/src/cli/jobfile.ts:63redos-nested-quantifier · CWE-1333 - mediumregex with nested unbounded quantifiers
source/src/cli/jobfile.ts:68redos-nested-quantifier · CWE-1333 - mediumregex with nested unbounded quantifiers
source/src/cli/jobfile.ts:69redos-nested-quantifier · CWE-1333 - mediumSQL built from a template literal or f-string
source/src/core/agents.ts:432sql-template-interpolation · CWE-89 - mediumMAC or signature compared with ==
source/src/core/coinpay.ts:358js-timing-unsafe-mac-compare · CWE-208 - mediumSQL built from a template literal or f-string
source/src/core/jobs.ts:315sql-template-interpolation · CWE-89 - mediumSQL built from a template literal or f-string
source/src/core/jobs.ts:930sql-template-interpolation · CWE-89 - mediumSQL built from a template literal or f-string
source/src/core/orgs.ts:192sql-template-interpolation · CWE-89 - mediumSQL built from a template literal or f-string
source/src/core/recommendations.ts:201sql-template-interpolation · CWE-89 - mediumSQL built from a template literal or f-string
source/src/core/recommendations.ts:333sql-template-interpolation · CWE-89 - mediumSQL built from a template literal or f-string
source/src/core/updates.ts:437sql-template-interpolation · CWE-89 - mediumSQL built from a template literal or f-string
source/src/core/updates.ts:447sql-template-interpolation · CWE-89 - mediumSQL built from a template literal or f-string
source/src/core/updates.ts:461sql-template-interpolation · CWE-89 - mediumSQL built from a template literal or f-string
source/src/core/updates.ts:471sql-template-interpolation · CWE-89 - mediumregex with nested unbounded quantifiers
source/src/markup/markdown.ts:80redos-nested-quantifier · CWE-1333 - mediumregex with nested unbounded quantifiers
source/src/markup/resume.ts:380redos-nested-quantifier · CWE-1333 - mediumregular expression compiled from a variable
source/src/server/app.tsx:68js-regex-from-input · CWE-1333 - mediumunescaped HTML rendering
source/src/views/layout.tsx:167js-unescaped-html-sink · CWE-79 - lowDatabase URL with credentials
source/test/api.test.ts:19secret-database-url · CWE-798 - lowHardcoded Credential
source/test/api.test.ts:1947secret-generic-credential · CWE-798 - lowHardcoded Credential
source/test/api.test.ts:2456secret-generic-credential · CWE-798 - lowwrite to a prototype-reachable key
source/test/applications.test.ts:83js-prototype-pollution · CWE-1321 - lowDatabase URL with credentials
source/test/credits-invites.test.ts:19secret-database-url · CWE-798 - lowDatabase URL with credentials
source/test/idempotency.test.ts:17secret-database-url · CWE-798 - lowDatabase URL with credentials
source/test/logout-session-cookie.test.ts:17secret-database-url · CWE-798 - lowHardcoded Credential
source/test/settings-sync.test.ts:35secret-generic-credential · CWE-798 - lowHardcoded Credential
source/test/settings-sync.test.ts:36secret-generic-credential · CWE-798 - lowDatabase URL with credentials
source/test/signup-profile.test.ts:16secret-database-url · CWE-798 - lowSQL built from a template literal or f-string
source/test/watch-account-limit.test.ts:52sql-template-interpolation · CWE-89
Badge for your README
[](https://w3bs.org/packages/agenticjobs.work/agenticjobs)