ClawHub

聘才猫（Pincaimao）面试出题大师

v1.0.1

聘才猫 - 面试出题大师 Use when calling Pincaimao Interview Question Master API to generate interview questions based on a job description and candidate resume. Requir...

⭐ 0· 94·0 current·0 all-time
by聘才猫（Pincaimao）@pincaimao
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the actions in SKILL.md — uploading a resume and calling api.pincaimao.com to generate questions. Required binaries (curl, python3) and the single env var (PCM_INTERVIEW_QUESTIONS_KEY) are appropriate for HTTP calls and JSON parsing.
ℹ
Instruction Scope
Instructions focus on file upload and chat API calls to api.pincaimao.com and on collecting job_info and a resume path. It also directs the agent to check for and load a separate 'pincaimao-basic' skill for shared interfaces — this is reasonable but is an implicit dependency not enforced by the manifest (user should ensure that skill is trusted). The agent may use conversational context to find an existing JD, which is expected behavior.
✓
Install Mechanism
Instruction-only skill with no install spec and no downloads — lowest-risk install posture. It does not write code to disk or request external archives.
✓
Credentials
Only one API key (PCM_INTERVIEW_QUESTIONS_KEY) is required and is used directly in Authorization headers as expected. No unrelated secrets, config paths, or additional credentials are requested. The SKILL.md consistently references only that env var.
✓
Persistence & Privilege
always:false and no instructions to modify other skills or system configs. The skill declares it is safe to invoke autonomously, which is acceptable for an API wrapper but users should consider privacy implications before enabling autonomous runs.
Assessment
This skill is internally consistent with its purpose (upload a resume and call Pincaimao's API). Before installing: (1) Treat PCM_INTERVIEW_QUESTIONS_KEY as sensitive — only provide a scoped key you trust and rotate it if needed. (2) Be aware resumes and job descriptions are transmitted to api.pincaimao.com and stored in their COS; do not upload sensitive personal data you cannot share. (3) The SKILL.md asks you to check/load a separate 'pincaimao-basic' skill — confirm that dependency is trustworthy. (4) If you plan to allow autonomous invocation, consider limiting when/what data is sent automatically. If you want, I can list concrete mitigations (key scoping, data redaction, or testing with non-sensitive samples) before you enable the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97610zjh2k58mqvx134wbaav5843tdh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

❓ Clawdis
Binscurl, python3
EnvPCM_INTERVIEW_QUESTIONS_KEY
Primary envPCM_INTERVIEW_QUESTIONS_KEY

Comments