CV Skill
v1.0.0Create professional Harvard-style resumes and CVs from user-provided candidate descriptions, structured data, or existing resumes. Use when the user wants a...
⭐ 0· 44·0 current·0 all-time
byJason@jasoncodespace
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, SKILL.md, reference docs, example JSON, and the Python generator are all aligned: the package is a local resume generator. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions tell the agent to use the included script and schema, review outputs, and avoid hardcoding secrets. The script only reads a user-provided JSON, uses local fonts/styles, writes DOCX output, and optionally calls LibreOffice to convert to PDF. There are no instructions to read unrelated system files, environment variables, or to send data to external endpoints.
Install Mechanism
There is no install spec (instruction-only + local script). The script requires Python and the python-docx package (not declared in metadata) and optionally LibreOffice/soffice for PDF conversion. This is normal but users should be aware they must install python-docx and have Python available.
Credentials
The skill declares no required environment variables, no credentials, and the code does not read env vars. No sensitive or unrelated secrets are requested.
Persistence & Privilege
The skill is not always-enabled and does not modify other skills or system-wide agent settings. It runs locally when invoked and writes output files to a user-specified directory only.
Assessment
This skill appears to do only what it says: generate DOCX (and optionally PDF) resumes from a JSON input. Before running, verify you have Python and the python-docx package installed, run the script in a directory you control, and inspect generated files before sharing. Because the script will write files, avoid running it with elevated privileges and don't place real candidate PII in the skill folder—use redacted example files. If you need stronger assurance, open and review scripts/generate_resume.py yourself or run it in an isolated environment. If you plan to enable autonomous agent invocation, remember the agent could run this script and write output without additional prompts — only enable that if you trust the skill and its inputs.Like a lobster shell, security has layers — review code before you run it.
latestvk970ygnsd91x13n3p6ep9efnxn84v2qv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.