Backend Interview Simulator

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI05: Unexpected Code Execution

What this means

The skill may create a local folder in the user’s home directory on first use.

Why it was flagged

The skill asks the agent to run a local shell command during setup. The command is fixed and limited to creating the skill’s data directory, so it appears purpose-aligned, but it is still local command execution users should notice.

Skill content

On first message, ensure data directory exists:

```bash
mkdir -p ~/.openclaw/backend-interview-simulator
```

Recommendation

Approve only the shown directory-creation command and do not allow unrelated shell commands under this skill.

Note

ASI06: Memory and Context Poisoning

What this means

Interview history, weak areas, saved answers, and CV-derived profile details may remain available across sessions.

Why it was flagged

The skill persists profile and interview-prep state locally, including CV-derived skills/projects, so personal data can influence later sessions.

Skill content

**Storage:** `~/.openclaw/backend-interview-simulator/` only.

CV content is used only to populate profile and tailor questions; do not store raw CV text.

Recommendation

Only provide CV content you are comfortable storing in summarized form, and delete `~/.openclaw/backend-interview-simulator/` if you want to clear the skill’s local memory.