Cover Letter
v2.3.6求职信生成器。中英文求职信、JD关键词匹配、求职信评分诊断、多模板(应届/社招/内推/转行/外企)、批量生成。Cover letter generator with Chinese/English support, JD matching, scoring, templates, batch generation...
⭐ 0· 454·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (cover letter generator, JD matching, scoring, templates, batch) align with the included scripts: cover.sh generates templates, scores letters, and batch-generates; script.sh is a small local data/log utility. The SKILL.md also documents the same commands. One minor metadata mismatch: registry metadata listed 'Source: unknown' while SKILL.md includes homepage/source URLs (bytesagain.com, GitHub). This is a documentation inconsistency but not a functional red flag.
Instruction Scope
SKILL.md instructs running the included CLI-style commands and shows examples; the runtime behavior in scripts is limited to text generation, scoring with local grep/wc/sed, and simple batch output. There are no instructions to read unrelated system config, network endpoints, or to transmit data externally.
Install Mechanism
No install spec (instruction-only), and the repository supplies bash scripts. No downloads, package installs, or archive extraction are required by the skill, so installation risk is low.
Credentials
The skill declares no required environment variables or credentials. The scripts optionally respect COVER_LETTER_DIR / XDG_DATA_HOME / HOME for storing data—this is proportionate for a tool that stores user data. No secrets or unrelated credentials are requested.
Persistence & Privilege
always:false and normal invocation. The scripts create and write files under a user data directory (~/.local/share/cover-letter or COVER_LETTER_DIR) and log activity; this is expected for local storage and not a cross-skill or system-wide privilege escalation.
Assessment
This skill appears to be a local cover letter generator and grader implemented in Bash. It does not request credentials or reach out to external endpoints. Before installing or running: 1) review and be comfortable with the script writing to a data directory (default: $HOME/.local/share/cover-letter) — it creates data.log and history.log; 2) check the SKILL.md source/homepage URLs (bytesagain.com, GitHub) if you want an upstream reference or updates (registry metadata noted 'Source: unknown'); 3) run the scripts in a sandbox or inspect them yourself if you have concerns about local files — the code is short and readable and uses standard Unix tools (date, grep, sed, wc). If you plan to use it in automated workflows, be aware it stores logs and entries locally and does not encrypt them.Like a lobster shell, security has layers — review code before you run it.
chinesevk97a2damg2yx7s76w02jpx7dws82qfpalatestvk975txdrsxha762mts6b8nvdgn833mm0productivityvk97a2damg2yx7s76w02jpx7dws82qfpa
License
MIT-0
Free to use, modify, and redistribute. No attribution required.