ANDG
v1.0.0Analyze job descriptions, extract real hiring signals, assess candidate fit, and provide resume tailoring advice.
⭐ 0· 228·0 current·0 all-time
byAndrew@andrewgufx
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The declared purpose (analyzing JDs and tailoring resumes) aligns with the SKILL.md content and the lack of required binaries/credentials. However, the registry name 'ANDG' does not match the SKILL.md name 'job-matcher' (slug: job-matcher), which is an incoherence in metadata that reduces trust in provenance.
Instruction Scope
SKILL.md is an instruction-only skill focused on JD analysis and resume tailoring and does not request system files or credentials. Concern: the output specification is internally inconsistent — it instructs a specific ordered text/section format (human-readable headings) but then ends with 'Respond with your evaluation as a single JSON object,' creating ambiguity about the expected structured output. This could lead to unpredictable agent behavior or parsing errors. The doc also prescribes assuming a default candidate profile (student/early-career), which may override or bias analyses if a different user profile is provided without clear priority rules.
Install Mechanism
No install spec and no code files — lowest-risk delivery method (instruction-only). Nothing is written to disk and no external downloads are requested.
Credentials
The skill declares no environment variables, no credentials, and no config paths. That is proportionate for a text-analysis/resume-advice skill.
Persistence & Privilege
always:false and default model invocation allowed. This is the platform normal; the skill does not request permanent presence or system-level changes.
What to consider before installing
This skill is largely coherent for the advertised purpose, but exercise caution: 1) Metadata mismatch — the registry lists the skill as 'ANDG' while the SKILL.md calls it 'job-matcher' (slug job-matcher). That suggests sloppy publishing or potential mislabeling; prefer skills with clear provenance. 2) The SKILL.md ends with contradictory output instructions (human-readable sections vs 'single JSON object'), so test the skill with non-sensitive sample input first to see actual output format. 3) The skill will process resume and JD text — avoid pasting highly sensitive personal data (SSNs, full addresses, private tokens). 4) Because there's no homepage or known owner, treat it as unvetted: if you plan to rely on it for application decisions, validate outputs manually and/or compare with a known trusted tool. If you want higher assurance, ask the publisher for clarification on the name mismatch and output format or look for the same functionality from a skill with clear provenance.Like a lobster shell, security has layers — review code before you run it.
latestvk977em2wned647fhmawcna7wd982etfk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎯 Clawdis