ClawHub

聘才猫（Pincaimao）模拟面试

v1.0.1

聘才猫 - 模拟面试 Use when calling Pincaimao Mock Interview API to simulate a real interview scenario with multi-turn conversation. Supports text and video modes, c...

⭐ 1· 98·0 current·0 all-time
by聘才猫（Pincaimao）@pincaimao
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the declared requirements: PCM_MOCK_INTERVIEW_KEY, curl, and python3 are reasonable and expected for calling the Pincaimao API and parsing JSON. The SKILL.md's example API calls line up with the stated purpose.
ℹ
Instruction Scope
Instructions are scoped to uploading resumes and driving multi-turn chat to api.pincaimao.com and require preserving conversation_id. Two notes: (1) it asks you to have 'pincaimao-basic' installed (an external dependency that increases surface area — inspect that skill separately), and (2) the optional inputs.url_callback feature can cause results to be POSTed to an arbitrary callback URL if the user supplies one, which could be used to forward data to third parties.
✓
Install Mechanism
Instruction-only skill with no install spec or external downloads; nothing is written to disk or fetched at install time by the skill itself (lowest risk install model).
✓
Credentials
Only a single API key (PCM_MOCK_INTERVIEW_KEY) is required, which is appropriate for an authenticated API client. No unrelated secrets, config paths, or excessive env variables are requested.
✓
Persistence & Privilege
always:false and no indications the skill modifies other skills or system-wide settings. It does not request persistent system privileges.
Assessment
This skill appears to do what it claims, but review these before installing: 1) Keep PCM_MOCK_INTERVIEW_KEY secret — the agent will send it as a Bearer token to api.pincaimao.com. 2) The skill transmits resumes, job descriptions, and uploaded files to Pincaimao's API/COS; treat those as sensitive PII and confirm the service's retention/privacy policy. 3) Be cautious with the optional url_callback: do not provide untrusted callback URLs (they could receive your reports). 4) The SKILL.md asks you to install 'pincaimao-basic' — inspect that skill's instructions and permissions before installing it. 5) If you need stricter control, avoid autonomous invocation or limit what data you pass (omit sensitive fields or avoid file uploads).

Like a lobster shell, security has layers — review code before you run it.

latestvk97ecw36y32qjexazdsc67nksx842655

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎭 Clawdis
Binscurl, python3
EnvPCM_MOCK_INTERVIEW_KEY
Primary envPCM_MOCK_INTERVIEW_KEY

Comments