ClawHub

聘才猫（Pincaimao）简历诊断

v1.0.1

聘才猫 - 简历诊断 Use when calling Pincaimao Resume Diagnosis Assistant API to parse and diagnosis a candidate resume against a job description. Requires uploading...

⭐ 1· 83·0 current·0 all-time
by聘才猫（Pincaimao）@pincaimao
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (resume diagnosis) align with required pieces: an API key (PCM_RESUME_DIAGNOSIS_KEY), curl and python3 for simple HTTP calls and JSON parsing. The SKILL.md's mention of a separate pincaimao-basic helper is a dependency note (not required by this file) but is explainable as a recommendation for shared upload/auth patterns.
✓
Instruction Scope
Instructions only describe: confirm job info & resume, upload file to api.pincaimao.com to get cos_key, then call the chat API with the key and cos_key. The skill only reads the declared env var and user-supplied resume path; it does not instruct reading other system files or exfiltrating data to other endpoints.
✓
Install Mechanism
No install spec — instruction-only skill. No downloads or archive extraction are present, so nothing is written to disk by the skill itself beyond ordinary use of existing curl/python3 binaries.
✓
Credentials
Only a single service-specific API key (PCM_RESUME_DIAGNOSIS_KEY) is required, which is proportional to calling the external API. No unrelated credentials, config paths, or excessive env variables are requested.
✓
Persistence & Privilege
always:false (default). The skill does not request permanent system-level presence or modify other skills' configs. Autonomous invocation is allowed by platform default but the skill's network calls are scoped to api.pincaimao.com.
Assessment
This skill appears to do exactly what it says: upload resumes and call Pincaimao's API using PCM_RESUME_DIAGNOSIS_KEY. Before installing: (1) Only provide this API key if you trust api.pincaimao.com — the key and uploaded resumes will be sent to that service. (2) Avoid uploading highly sensitive PII unless you’ve reviewed Pincaimao’s privacy/storage policy and retention rules for COS objects. (3) The SKILL.md references a separate 'pincaimao-basic' helper for upload details — confirm whether you need that other skill or instructions. (4) If you do not want the agent to call the skill autonomously, disable autonomous invocation in the agent configuration. Revoke the API key if you later suspect misuse.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b43ta964y5jjpehwhrpw08n8430ey

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎯 Clawdis
Binscurl, python3
EnvPCM_RESUME_DIAGNOSIS_KEY
Primary envPCM_RESUME_DIAGNOSIS_KEY

Comments