ClawHub

Tamar Resume Tailor

v1.4.1

Tailor resumes for specific job applications using the Tamar AI API

⭐ 1· 99·0 current·0 all-time
byEvgeny Shneyderman@evgenyshneyderman
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (resume tailoring via Tamar API) match the declared requirements: a tamar CLI binary and TAMAR_API_KEY. The npm package install (tamar-cli → tamar) is appropriate for the stated purpose.
✓
Instruction Scope
SKILL.md contains step-by-step CLI instructions (profile check, upload, tailor, feedback, download). It avoids reading config files directly and warns about shell injection, instructing safe use of temp files and quoting. The agent is only asked to read files/paths provided by the user (resumes or pasted JDs), which is appropriate for this skill.
ℹ
Install Mechanism
Install uses a public npm package (tamar-cli), which is a typical and expected method. Minor inconsistency: README and SKILL.md state the user should install the CLI manually and that the skill "will not attempt to install packages on your behalf," yet the metadata includes an install spec. This is likely benign but worth noting so users understand whether the platform may auto-install.
✓
Credentials
Only TAMAR_API_KEY is required and declared as the primary credential. The skill relies on the tamar CLI, which stores the key in ~/.tamarrc — the SKILL.md explicitly instructs not to read that file directly and to use tamar status instead. No unrelated credentials are requested.
✓
Persistence & Privilege
always:false (default). The skill does not request permanent/system-wide privileges or access to other skills' configurations. Autonomous invocation (model invocation enabled) is the platform default and not a separate concern here.
Assessment
This skill appears coherent, but review these practical points before enabling: (1) You must install the tamar CLI (npm tamar-cli) and provide a Tamar API key — the CLI will store the key in ~/.tamarrc; the skill intentionally avoids reading that file directly. (2) Verify the tamar-cli package and ask-tamar.com are trustworthy (check the npm package page and service docs) before installing. (3) The skill will run local CLI commands and read resume or job-description files you supply — avoid giving file paths that expose unrelated sensitive data. (4) Note the minor metadata mismatch: docs say the skill won’t auto-install the CLI, but an install spec exists in the manifest; confirm whether your platform will auto-install or if you should install manually. If you have concerns about the third-party CLI, consider creating a dedicated API key that you can revoke or rotate.

Like a lobster shell, security has layers — review code before you run it.

aivk97835rfkk8rft7tq65rt4ccsh83say4careervk97835rfkk8rft7tq65rt4ccsh83say4jobsvk97835rfkk8rft7tq65rt4ccsh83say4latestvk97e5jcn0fy1n396j9g1ppyxr983x29dproductivityvk97835rfkk8rft7tq65rt4ccsh83say4resumevk97835rfkk8rft7tq65rt4ccsh83say4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binstamar
EnvTAMAR_API_KEY
Primary envTAMAR_API_KEY

Install

Install Tamar CLI (npm)
Bins: tamar
npm i -g tamar-cli

Comments