Check a 'take-home task' repo from a job offer for malware with ChatGPT before running it

Posted

Jan 11, 2026 by @makowskid

·

Last checked

Oct 17, 2026

·

Method:

How we verify

Evidence: Described by posterThe person describes what happened in words, without screenshots or video.

Outcome

A developer offered a 'unicorn' job taking over a software project was asked to review and run the company's GitHub repository. Instead of cloning or running it, he asked ChatGPT to analyze it, and says it found hidden malware in what looked like a harmless library file, built to connect to an outside server and steal files, keys and credentials when the project was started. He calls it a common scam aimed at job seekers.

Agent

ChatGPT

The source didn't share its exact prompt, so we wrote this from what it describes.

Run this task now, exactly as written below. Everything you need is here, so start straight away and only stop if something required is missing or a rule below tells you to.

Goal: Check a job offer and any files or code they sent me for scam warning signs before I open or run anything.

Fill in before running:
- The job message and company name: [PASTE]
- Links or files they sent (don't run them): [LINKS]
- What they're asking me to do: [DETAILS]

Rules:
- List red flags (urgency, payment requests, odd links, requests to run code or install software).
- For code, look for hidden network calls, obfuscated text, or scripts that run on install or start.
- Check whether the company and recruiter appear to be real, citing sources.
- Tell me plainly: safe to proceed, proceed with caution, or likely scam.
- If a site asks for a login, a CAPTCHA or payment details, stop and hand control back to me.
- Ask for my OK before you pay, book, send, submit or cancel anything.
- Check facts that can change (prices, opening hours, dates, availability, rules) against the official source, and tell me anything you couldn't verify.

Output: A red-flag list and a clear verdict with reasons.

You'll know it worked when: I make a decision without having run or installed anything from them.

Run this task now, exactly as written below. Everything you need is here, so start straight away and only stop if something required is missing or a rule below tells you to.

Goal: Check a job offer and any files or code they sent me for scam warning signs before I open or run anything.

Fill in before running:
- The job message and company name: [PASTE]
- Links or files they sent (don't run them): [LINKS]
- What they're asking me to do: [DETAILS]

Rules:
- List red flags (urgency, payment requests, odd links, requests to run code or install software).
- For code, look for hidden network calls, obfuscated text, or scripts that run on install or start.
- Check whether the company and recruiter appear to be real, citing sources.
- Tell me plainly: safe to proceed, proceed with caution, or likely scam.
- If a site asks for a login, a CAPTCHA or payment details, stop and hand control back to me.
- Ask for my OK before you pay, book, send, submit or cancel anything.
- Check facts that can change (prices, opening hours, dates, availability, rules) against the official source, and tell me anything you couldn't verify.
- Never run code or install apps from a stranger on your main computer; report scam listings to the platform.

Output: A red-flag list and a clear verdict with reasons.

You'll know it worked when: I make a decision without having run or installed anything from them.

Before you finish: re-read my goal and constraints, check your answer against each one, and list anything you assumed or couldn't confirm.

Source

https://x.com/makowskid/status/2010206469069709692