聘才猫（Pincaimao）平台基础能力

• Outcome: Pass
• Latest audit: Sep 15, 2026 · 1:42 AM UTC
• Version: 1.0.2

Overview

This skill is a disclosed Pincaimao API helper that sends selected HR and resume data to Pincaimao, with no hidden install, persistence, or unrelated data flow found.

Install only if you intend to use Pincaimao's hosted API and are comfortable sending resumes, uploaded files, job descriptions, contract text, audio-derived text, and conversation history to api.pincaimao.com under your API key. Treat returned cos_key values and presigned links as sensitive, and avoid using the skill with data you are not authorized to share.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (18)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High

• Category: YARA Match
• Confidence: 80% confidence

Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md

---
name: pincaimao-basic
description: 聘才猫平台基础能力 Use when calling any Pincaimao platform API — file upload, presigned URL, conversation list, message history, audio-to-text, resume JSON upload, or the base chat-messages interface. Reference this skill before building any PCM agent skill.
version: 1.0.2
allowed-tools:
  - Bash
metadata:
  openclaw:
    emoji: "🏗️"
    homepage: https://www.pincaimao.com
    requires:
      env:
        - PCM_ANY_KEY  # General-purpose key for non-chat endpoints. Agent-specific keys (e.g. PCM_JD_ASSISTANT_KEY) are declared in each agent skill.
      bins:

External Script Fetching

High

• Category: Supply Chain
• Confidence: 90% confidence

Finding

Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.

Content

Scanner excerpt · SKILL.md (reported line 98)May include surrounding context.

Streaming 解析模板

bash

curl -N -s -X POST 'https://api.pincaimao.com/agents/v1/chat/chat-messages' \
  -H "Authorization: Bearer <agent-specific-key>" \
  -H 'Accept: text/event-stream' \
  -H 'Content-Type: application/json' \

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 46)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 98)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 127)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 130)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 151)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 154)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 164)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 167)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 183)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 186)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 196)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 199)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 211)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 216)May include surrounding context.

md

## 1. chat-messages（智能体对话）

**POST** `https://api.pincaimao.com/agents/v1/chat/chat-messages`

### 请求体

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 98)May include surrounding context.

Streaming 解析模板

bash

curl -N -s -X POST 'https://api.pincaimao.com/agents/v1/chat/chat-messages' \
  -H "Authorization: Bearer <agent-specific-key>" \
  -H 'Accept: text/event-stream' \
  -H 'Content-Type: application/json' \

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 186)May include surrounding context.

GET https://api.pincaimao.com/agents/v1/chat/messages

bash

curl -s "https://api.pincaimao.com/agents/v1/chat/messages?conversation_id=xxxx&limit=20" \
  -H "Authorization: Bearer $PCM_ANY_KEY"

Static analysis

No suspicious patterns detected.