h1b-sponsor
career-ops-hq/career-ops / plugins/h1b-sponsor
checks H-1B sponsorships of a US employer , which improves: avoids applications with no visa prospects
Details
- judge’s score
- 9/10
- place
- outside the packs
- publisher
- career-ops-hq
- status
- new
- pinned commit
- ea3ede6 on GitHub (new tab)
- skill’s last commit
- Aug 31, 2026
- repo stars
- 75,752
- main type
- Other
Judgement
Triggering and rules are very precise (entity resolution, third parties, consent before installation). Clear subject, but limited to career-ops. Long, repetitive text, truncated annexes.
reservations
- README.md and skill.md annexes truncated: the end of the document (section on the token and the HTTP API) could not be fully verified.
- The scripts (check.mjs, install-h1b-index.mjs, token.mjs, lib/*.mjs) were not provided: their actual behavior was not reviewed.
- Very long and repetitive document (entity resolution rules repeated several times), which weighs on context at each load.
- Triggering
- 2/2
- Added value
- 2/2
- Precision
- 2/2
- Scope
- 2/2
- Quality
- 1/2
Alerts
5 alerts, by category
Static scan
- high risk
scripts run by the SKILL.md
check.mjs, index.mjs, install-h1b-index.mjs, lib/index.mjs, token.mjs
- info risk
bundled scripts, not run by the SKILL.md
lib/api.mjs, lib/cache.mjs, lib/clean.mjs, lib/tier.mjs
Network
- high risk
If H1B_API_BASE is configured, the target employer's name (and thus the job search) is sent to a third-party HTTP endpoint chosen by the user.
- high risk
install-h1b-index.mjs downloads 8 MiB from GitHub; the skill requires prior agreement and a sha256 check, which limits the risk.
Data
- medium risk
token.mjs creates a durable identifier in the user's name; the skill requires explicit agreement, but execution remains the agent's responsibility.
Original description
—
added on Oct 19, 2026 · license MIT