聘才猫（Pincaimao）在线面试
v1.0.1聘才猫 - 在线面试 Use when calling Pincaimao Online Interview API to conduct a multi-turn AI interview session. Supports text and video interview modes, custom ques...
⭐ 1· 93·0 current·0 all-time
by聘才猫（Pincaimao）@pincaimao
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (online interview) match the declared requirements: one API key (PCM_ONLINE_INTERVIEW_KEY), curl and python3 for HTTP calls and simple JSON parsing, plus expected parameters for job info, resume upload, video, and conversation_id.
Instruction Scope
SKILL.md instructs the agent to upload local resume files and to pass the user's API key in Authorization headers to api.pincaimao.com — this is appropriate for the feature. It also references installing/loading a related 'pincaimao-basic' skill for shared interfaces. The doc allows the user/agent to set a url_callback (arbitrary URL) which means the final report can be posted to any endpoint the user supplies; that's functional but a privacy/exfiltration risk if an untrusted callback is used.
Install Mechanism
Instruction-only skill with no install spec and no downloaded code. No files are written by the skill itself and no external archives/third-party packages are fetched by the skill.
Credentials
Only one required environment variable (PCM_ONLINE_INTERVIEW_KEY) is declared and is the primary credential used in Authorization headers. No unrelated secrets, extra credentials, or config paths are requested.
Persistence & Privilege
always:false and no instructions to modify other skills or system settings. The skill runs network calls scoped to the Pincaimao API and does not claim persistent installation or cross-skill modification.
Assessment
This skill appears to do what it says: it will call api.pincaimao.com using the PCM_ONLINE_INTERVIEW_KEY and can upload local resume files. Before installing or invoking: (1) only set PCM_ONLINE_INTERVIEW_KEY if you trust the Pincaimao service and avoid placing the key in shared/public environments; (2) be cautious about uploading sensitive files (resumes, transcripts) — those are sent to Pincaimao and stored in their COS; (3) only provide a url_callback you control or trust, since the platform will POST the generated report there; (4) review or audit any referenced prerequisite skill (pincaimao-basic) before loading it. If you need higher assurance, ask for the pincaimao-basic SKILL.md and any network/debug logs to verify exactly what endpoints will be called.Like a lobster shell, security has layers — review code before you run it.
latestvk975jn8tvpnprbzer8119d41fs843qc7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎥 Clawdis
Binscurl, python3
EnvPCM_ONLINE_INTERVIEW_KEY
Primary envPCM_ONLINE_INTERVIEW_KEY