ClawHub

聘才猫（Pincaimao）劳动合同卫士

v1.0.1

聘才猫 - 劳动合同卫士 Use when calling Pincaimao Labor Contract Guard API to analyze a labor contract and generate an assessment report. Accepts either a contract fil...

⭐ 2· 83·0 current·0 all-time
by聘才猫（Pincaimao）@pincaimao
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description align with actions: uploading a contract and calling api.pincaimao.com. Required items (PCM_LABOR_CONTRACT_KEY, curl, python3) are reasonable for the documented workflow. Minor note: SKILL.md asks the user to 'check pincaimao-basic' beforehand, but that is a usage suggestion rather than a hidden dependency.
✓
Instruction Scope
SKILL.md contains concrete, narrowly scoped instructions: upload file to Pincaimao COS, call the chat API, and pass the API key from PCM_LABOR_CONTRACT_KEY. It does not instruct reading unrelated files or system secrets and explicitly shows safe construction of JSON to avoid shell injection. It recommends storing/transmitting data only to api.pincaimao.com.
✓
Install Mechanism
Instruction-only skill with no install spec or downloads. No code is written to disk by the skill itself — lowest-risk install pattern.
✓
Credentials
Only one environment variable (PCM_LABOR_CONTRACT_KEY) is required and is the primary credential used for authorization to the documented API; this is proportional to the skill's purpose. Required binaries (curl, python3) are consistent with examples.
✓
Persistence & Privilege
Skill is not always-enabled and does not request elevated platform privileges or modify other skills. Autonomous invocation is allowed by default (normal); nothing in the skill requests permanent presence or cross-skill configuration changes.
Assessment
This skill appears to do exactly what it says: it uploads contract files or accepts contract text and sends them to api.pincaimao.com authorized by PCM_LABOR_CONTRACT_KEY. Before installing, confirm you trust https://www.pincaimao.com and are comfortable sending contract text to that external service. Store the PCM_LABOR_CONTRACT_KEY securely (environment variable) and limit its scope if possible; revoke/regenerate the key if it may be exposed. Review the optional 'pincaimao-basic' skill the README mentions before installing it, and test with non-sensitive sample content first.

Like a lobster shell, security has layers — review code before you run it.

latestvk975ya4rzywrsj1z2g98e4nhzs842mc5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⚖️ Clawdis
Binscurl, python3
EnvPCM_LABOR_CONTRACT_KEY
Primary envPCM_LABOR_CONTRACT_KEY

Comments