ResumeClaw
v1.0.0Manage your ResumeClaw career agent — an AI that represents your professional experience to recruiters 24/7. Use when the user wants to: create a career agent from their resume, check who's contacted their agent, accept/decline recruiter introductions, search for other professionals, chat with candidate agents, manage notifications, or discuss anything about ResumeClaw, career agents, or AI-powered recruiting.
⭐ 1· 1.7k·5 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description align with the code and API reference. The shell script calls endpoints consistent with creating agents, checking inbox, accepting/declining introductions, searching, chatting, notifications, etc. No unrelated services or credentials are requested.
Instruction Scope
Runtime instructions are scoped to resume management: read resume files from the workspace or stdin, prompt for login, and call the ResumeClaw API. The instructions and script do read/write a session cookie at ~/.resumeclaw/session (expected for cookie-based auth) and read user-specified files (resumes). They do not instruct reading other system files or arbitrary secrets.
Install Mechanism
No install spec — instruction-only with an included script. Nothing is downloaded at install-time. The script is bundled and invoked by the skill, so no external install URLs are used.
Credentials
No required environment variables are declared. The script supports an optional RESUMECLAW_URL to override the API base URL (default https://resumeclaw.com). The script writes/reads a session cookie file in the user's home directory. It does not request unrelated credentials or multiple tokens.
Persistence & Privilege
always:false (not force-included). The script persists a session cookie to ~/.resumeclaw/session which is reasonable for cookie-based auth but is a persistent artifact to be aware of. The skill does not alter other skills' config or require system-wide privileges.
Assessment
This skill is internally consistent with its stated purpose, but verify you trust the ResumeClaw service before using it. Practical steps:
- Inspect the bundled script (scripts/resumeclaw.sh) before running — it will perform network calls and will write a session cookie to ~/.resumeclaw/session.
- Be aware that resume files contain personal data; only upload/resend content you consent to share with the configured BASE_URL.
- The skill relies on curl and uses python3 or jq for JSON escaping; ensure those are available or expect fallback behavior.
- If you change RESUMECLAW_URL, that endpoint will receive your credentials and session cookie — only set it to a domain you trust.
- If you stop using the skill, delete ~/.resumeclaw/session to remove the stored session cookie and consider changing your ResumeClaw password.
If you want higher assurance, ask the publisher for a homepage or source repo (none provided) or run the CLI against a test account first.Like a lobster shell, security has layers — review code before you run it.
ai-agentsvk97d6pjk17707wczm47wtzbb4h80fcngcareersvk97d6pjk17707wczm47wtzbb4h80fcnglatestvk97d6pjk17707wczm47wtzbb4h80fcngrecruitingvk97d6pjk17707wczm47wtzbb4h80fcngresume 5. Changelog: Launch: AI career agents that represent you 24/7vk97d6pjk17707wczm47wtzbb4h80fcng
License
MIT-0
Free to use, modify, and redistribute. No attribution required.