AI-Interview-Coach
v2.0.0AI-powered interview preparation assistant that reads resumes (PDF/Word/MD) or job positions to generate personalized interview questions. Creates a markdown...
⭐ 1· 41·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (generate interview questions from resumes or job descriptions) matches the SKILL.md workflow. The skill asks to read resumes (MD/PDF/DOCX) and produce a 10-question markdown document — all consistent with the stated purpose. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
The instructions legitimately direct the agent to read user-supplied resume files (paths) and extract text from PDF/DOCX/MD. This is in-scope for a resume analyzer. Two minor scope notes: (1) SKILL.md references using a 'PDF tool' and 'extract text' but does not specify which tool or whether extraction runs locally or remotely; (2) it offers to save output to a file (writing to disk) if desired. Both are reasonable for this skill but raise privacy considerations (where parsing/saving happens).
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest-risk installation surface. The README mentions an npx command (npx skills add HogoZhang/ai-interview-coach) but that is documentation only (no formal install spec in the registry). Because there's no declared installer or remote download in the skill bundle, nothing is written to disk by the skill itself.
Credentials
The skill requires no environment variables, credentials, or config paths. That is proportionate: a resume-to-questions generator does not need external keys. The only data it needs are user-provided resume files or role descriptions.
Persistence & Privilege
The skill is not always-enabled (always: false) and is user-invocable. disable-model-invocation is false (autonomous invocation allowed), which is the platform default; combined with the lack of broad credentials or install steps, this level of privilege is acceptable for the skill's function.
Assessment
This skill appears coherent and focused: it asks only for resume files or a job title and returns a markdown practice document. Before installing or using it, consider: 1) Privacy — only provide files you are comfortable sharing; ask whether the platform performs file parsing locally or uploads content to external services. 2) File parsing — the SKILL.md expects a PDF/Word extractor but doesn't name which tool will be used; ensure your environment has a trusted parser if you need local processing. 3) Installation note — the README mentions an npx install pointing to a GitHub/npm path; because the registry metadata lists an unknown source, verify the package origin before running external installers. 4) If you are concerned about sensitive data in resumes, paste only non-sensitive excerpts or redact before submitting. Overall, the skill is internally consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97a8yjvkrkdtw9j3kejsean0n84tynv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.