UK Resume Analyzer & Optimizer

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward local resume analysis skill, with the main caution that it creates local files containing personal resume details.

This skill looks safe to use for its stated purpose if you are comfortable letting it read your resume and job description locally. Use a controlled working folder, review the generated resume before sending it anywhere, and delete intermediate JSON/supplemental files when done.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill will process files on your machine and create new local files, including a backup and optimized resume.

Why it was flagged

The skill instructs running local Python scripts that read a resume and write JSON/docx outputs. This is central to the stated purpose, but it is still local tool execution with filesystem effects.

Skill content
python scripts/parse_resume.py <input.docx> --output parsed_resume.json ... python scripts/generate_optimized.py ... --output optimized_resume.docx ... --backup original_backup.docx
Recommendation

Run it only on intended resume files in a folder you control, and verify output and backup paths before execution.

What this means

If the dependency is missing, you may need to install a Python package yourself, which introduces normal package-source trust considerations.

Why it was flagged

The helper scripts depend on the Python docx package, but the supplied install specifications declare no install spec or package version. The artifacts do not auto-install anything, so this is a dependency-declaration notice rather than a security concern.

Skill content
from docx import Document
Recommendation

Install dependencies only from trusted package sources, and prefer a declared, pinned dependency list from the skill maintainer.

What this means

Private resume contents may remain on disk in parsed_resume.json and related output files after the task is complete.

Why it was flagged

The parser stores extracted resume text in a local JSON file. Resume text can include contact details, employment history, and other personal information.

Skill content
"raw_text": "" ... resume_data["raw_text"] += text + "\n" ... json.dump(data, f, indent=2, ensure_ascii=False)
Recommendation

Delete intermediate JSON and supplemental files when finished, and avoid running the skill in shared or synced folders unless you want those files stored there.