Back to skill
Skillv1.0.1
VirusTotal security
聘才猫（Pincaimao）简历优化 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 2, 2026, 7:21 AM
- Hash
- bc2856d3e0d6d1b8d5a72b1d5841ed205fe1e43a6e2ba855383d1a8ac98f04c5
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: pincaimao-resume-optimize Version: 1.0.1 The skill facilitates the uploading of local files and job data to an external API (api.pincaimao.com) using Bash and curl. It is classified as suspicious because the provided Bash examples are highly vulnerable to command injection if the AI agent does not properly sanitize inputs (e.g., file paths or job descriptions) before execution. While the behavior aligns with the stated purpose of resume optimization, the combination of file exfiltration to a third-party service and risky shell execution patterns warrants caution.
- External report
- View on VirusTotal