Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Recruiting

v2.3.0

Hiring workflow management with structured processes and candidate tracking. Use when user mentions hiring, job descriptions, resume screening, interviews, c...

0· 413·2 current·2 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (recruiting workflow) matches the included scripts' functionality (create job, add candidate, update pipeline). However the SKILL.md advertises many more capabilities (resume screening, interview prep, email drafting, reminders, reports) and many referenced scripts/files for those capabilities are missing from the package, so required functionality is incomplete.
!
Instruction Scope
SKILL.md explicitly states all data is stored locally and no external integrations are used; the included scripts adhere to this (file I/O only). But the instructions repeatedly reference scripts (screen_candidate.py, prep_interview.py, draft_email.py, view_pipeline.py, set_reminder.py, generate_report.py) and reference docs (interview-prep.md, communications.md, fair-hiring.md) that are not present — this mismatch gives the agent ambiguous runtime instructions and could lead to errors or unexpected behavior.
Install Mechanism
No install spec and no external downloads; the skill is instruction + a few local Python scripts. That minimizes install-time risk (no external code fetched).
Credentials
The skill requests no environment variables, no credentials, and the scripts operate on local files under a recruiting directory. There are no requests for unrelated secrets or system-wide credentials.
Persistence & Privilege
Skill does not request always:true and does not modify other skills. It writes to a directory in the user's home (~/.openclaw/workspace/memory/recruiting), which is consistent with declared local storage and not an elevated/system-wide location.
What to consider before installing
This package appears to implement basic local recruiting utilities (create job, add candidate, update pipeline) and does not contact external services or request secrets — that's good. However: 1) SKILL.md promises many more scripts and reference docs that are missing; verify whether the maintainer intentionally omitted those or if you received an incomplete package. 2) Confirm the exact data path: SKILL.md says memory/recruiting/ while scripts write to ~/.openclaw/workspace/memory/recruiting; make sure you’re OK with that location and that no other unexpected files will be written. 3) Before using for real candidate data, inspect or run the scripts in an isolated environment, and consider not storing sensitive PII (SSN, DOB) as the skill explicitly warns against it. 4) If you need the advertised features (screening, interview prep, email drafts, reminders, reports), ask the publisher for the missing scripts and reference docs or get source for those components and review them before granting the skill autonomy. If you’re unsure who the publisher is, prefer to run these scripts manually rather than enabling autonomous invocation.

Like a lobster shell, security has layers — review code before you run it.

candidatesvk97d07kbazmykn94n36skm60rd82gf10hiringvk97d07kbazmykn94n36skm60rd82gf10hrvk97d07kbazmykn94n36skm60rd82gf10jobsvk97d07kbazmykn94n36skm60rd82gf10latestvk977qf4mqef7wjpypvpb5a46y182k78trecruitingvk97d07kbazmykn94n36skm60rd82gf10
413downloads
0stars
5versions
Updated 12h ago
v2.3.0
MIT-0

Recruiting

Structured hiring system. Better process, better hires.

Critical Privacy & Safety

Data Storage (CRITICAL)

  • All hiring data stored locally only: memory/recruiting/
  • Candidate information never shared externally
  • No integration with external ATS or HR systems
  • No resume parsing services - manual review only
  • User controls all data retention and deletion

Safety Boundaries (NON-NEGOTIABLE)

  • ✅ Write job descriptions and screening criteria
  • ✅ Generate structured interview questions
  • ✅ Track candidate pipeline stages
  • ✅ Draft communications (for human review)
  • NEVER make hiring decisions
  • NEVER store sensitive personal data (SSN, DOB, etc.)
  • NEVER guarantee candidate quality or predict success
  • NEVER replace human judgment in hiring

Fair Hiring Note

Structured processes improve fairness but do not eliminate bias. Human oversight required at all decision points.

Quick Start

Data Storage Setup

Hiring data stored in your local workspace:

  • memory/recruiting/jobs.json - Open positions and requirements
  • memory/recruiting/candidates.json - Candidate profiles and status
  • memory/recruiting/pipeline.json - Hiring pipeline stages
  • memory/recruiting/interviews.json - Interview guides and notes
  • memory/recruiting/communications.json - Email templates and drafts

Use provided scripts in scripts/ for all data operations.

Core Workflows

Create Job Description

User: "Write a job description for a senior engineer"
→ Use scripts/create_job.py --title "Senior Engineer" --level senior
→ Generate JD with requirements, responsibilities, and screening criteria

Screen Candidate

User: "Screen this resume for the PM role"
→ Use scripts/screen_candidate.py --job-id "JOB-123" --resume "resume.pdf"
→ Evaluate against job criteria, output match assessment

Prepare Interview

User: "Prepare interview questions for the design role"
→ Use scripts/prep_interview.py --job-id "JOB-123" --type behavioral
→ Generate structured question set

Track Pipeline

User: "Update candidate status to phone screen complete"
→ Use scripts/update_pipeline.py --candidate-id "CAND-456" --stage "phone-screen" --status completed
→ Move candidate in pipeline, set next actions

Draft Communication

User: "Draft rejection email for candidate"
→ Use scripts/draft_email.py --type rejection --candidate-id "CAND-456"
→ Generate professional, personalized message for human review

Module Reference

For detailed implementation:

Scripts Reference

ScriptPurpose
create_job.pyCreate job posting with requirements
screen_candidate.pyEvaluate resume against criteria
prep_interview.pyGenerate interview question sets
add_candidate.pyAdd candidate to pipeline
update_pipeline.pyMove candidate through stages
view_pipeline.pyShow current pipeline status
draft_email.pyGenerate communications
set_reminder.pySet follow-up reminders
generate_report.pyCreate hiring metrics report

Disclaimer

This skill provides hiring process support only. All hiring decisions remain the responsibility of the hiring manager and organization. The skill does not guarantee candidate quality or success. Always comply with applicable employment laws and regulations.

Comments

Loading comments...