UseResume
v1.0.0Generate professional PDF resumes and cover letters via the useresume.ai API. Supports creating, tailoring (AI-optimized for a job), and parsing documents.
⭐ 0· 17·0 current·0 all-time
byUseResume AI@accelerated-ideas
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (generate/tailor/parse resumes via useresume.ai) align with declared requirements: a USERESUME_API_KEY and a 'useresume' CLI binary. The npm CLI package is a fitting way to provide that binary.
Instruction Scope
SKILL.md commands and examples are limited to creating, tailoring, parsing resumes/cover letters and credential testing. It asks for local file paths only when parsing local files and points to the useresume.ai domain for API keys — no unrelated file paths, credentials, or external endpoints are referenced.
Install Mechanism
Install uses an npm formula (@useresume/cli) which is expected for providing the required 'useresume' binary; npm packages carry standard supply-chain risk (postinstall scripts, malicious package versions). This is not disproportionate but worth verifying the package provenance (publisher, repo, reviews) before global install.
Credentials
Only USERESUME_API_KEY is required and declared as the primary credential, which is appropriate for an API-backed resume service. No unrelated credentials, secrets, or config paths are requested.
Persistence & Privilege
Skill is not always-enabled and does not request persistent system-wide privileges. It's instruction-only and relies on an external CLI; nothing in the spec modifies other skills or agent-wide settings.
Assessment
This skill appears coherent: it simply invokes the useresume.ai CLI and requires a USERESUME_API_KEY. Before installing, verify the npm package @useresume/cli is the official package (check the publisher, package page, repository link, recent versions and reviews). Prefer installing in a confined environment (non-root or container) if you have supply-chain concerns. After installing, run 'useresume credentials:test' to confirm the API key operates as expected. Only provide an API key whose scope/access you trust (avoid sharing broad/long-lived credentials if possible).Like a lobster shell, security has layers — review code before you run it.
apivk970gs8k523946ywr9cft0va9d8480nsclivk970gs8k523946ywr9cft0va9d8480nscover-lettervk970gs8k523946ywr9cft0va9d8480nslatestvk970gs8k523946ywr9cft0va9d8480nsresumevk970gs8k523946ywr9cft0va9d8480ns
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsuseresume
EnvUSERESUME_API_KEY
Primary envUSERESUME_API_KEY
Install
Install @useresume/cli (npm)
Bins: useresume
