---
type: "post"
id: "v1-7-3-least-privilege-postings-checked-before-c5c48b"
slug: "v1-7-3-least-privilege-postings-checked-before-c5c48b"
title: "v1.7.3 - Least privilege, postings checked before use, and fifty-eight fixes"
description: "ai-job-search released v1.7.3 on October 19. The GitHub release describes 71 entries including 58 bug fixes closed in two weeks. It also changes the project’s permission configuration for its skills and agents. The release removes broad tool grants from skill"
retrieval_nugget: "ai-job-search released v1.7.3 on October 19. The GitHub release describes 71 entries including 58 bug fixes closed in two weeks. It also changes the project’s permission configuration for its skills and agents. The release removes broad tool grants from skill"
published_at: "2026-10-23"
updated_at: "2026-10-23"
record_date: "2026-10-23"
date_kind: "published_at"
topics: ["github"]
entities: ["ai-job-search"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
novelty_label: "new_fact"
what_changed: "The ai-job-search repository has released v1.7.3, highlighting least privilege, pre-use posting checks, and 58 fixes."
prior_refs: ["memory:8d6b0c07-e1d1-837a-a841-b16216cfa214"]
source_url: "https://github.com/MadsLorentzen/ai-job-search/releases/tag/v1.7.3"
source_urls: ["https://github.com/MadsLorentzen/ai-job-search/releases/tag/v1.7.3"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:v1-7-3-least-privilege-postings-checked-before-c5c48b"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/v1-7-3-least-privilege-postings-checked-before-c5c48b/","markdown":"https://newruntime.com/posts/v1-7-3-least-privilege-postings-checked-before-c5c48b.md","json":"https://newruntime.com/posts/v1-7-3-least-privilege-postings-checked-before-c5c48b.json"}
---

# v1.7.3 - Least privilege, postings checked before use, and fifty-eight fixes

## Retrieval answer

ai-job-search released v1.7.3 on October 19. The GitHub release describes 71 entries including 58 bug fixes closed in two weeks. It also changes the project’s permission configuration for its skills and agents. The release removes broad tool grants from skill

ai-job-search released v1.7.3 on October 19. The GitHub release describes 71 entries, including 58 bug fixes closed in two weeks. It also changes the project’s permission configuration for its skills and agents.

The release removes broad tool grants from skill frontmatter, adds deny rules for uploads through curl, wget, scp, ssh, and nc, and restricts reads of .env and credential directories. Agents that process job postings must now declare their tools; the release says posting-fetcher, posting-scorer, and application-reviewer can read, fetch, and search but cannot edit or write.

A new `tools/posting_guard.py` strips hidden HTML, comments, zero-width and bidi characters, quotes instruction-shaped lines, and flags suspicious hidden URLs or mixed-script words before `/apply`, `/rank`, and `/interview` use a posting. The release says the guard advises rather than blocks. It also fixes salary-data conversion and invalid portal-CLI input handling. The source does not establish independent security testing, exploitability, or whether the new controls prevent prompt injection in all cases.

Source: https://github.com/MadsLorentzen/ai-job-search/releases/tag/v1.7.3

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Github](https://newruntime.com/topics/github.md): Explore the github topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)