ClawHub
Back to skill

Security audit

聘才猫（Pincaimao）简历优化

Security checks for vulnerabilities and agentic risk

Overview

This skill appears purpose-built for Pincaimao resume optimization, but it requires installing an unpinned companion skill before use and sends sensitive resume data to a third-party API.

Install only if you trust Pincaimao with the resume and job data being uploaded, and verify the source and exact version of pincaimao-basic before letting the agent install or load it. Prefer requiring explicit confirmation before uploads and avoid sending confidential resumes unless the service's retention and privacy terms fit your needs.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:20
Finding

Unpinned External Skill Dependency

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Note
Location
SKILL.md:57
Finding

Unsafe JSON Construction from User-Controlled Values

Content
View full analysis
Remediation
View remediation
request.json curl --fail-with-body -sS \ -X POST 'https://api.pincaimao.com/agents/v1/chat/chat-messages' \ -H "Authorization: Bearer $PCM_RESUME_OPTIMIZE_KEY" \ -H 'Content-Type: application/json' \ --data-binary @request.json ``` ]]>

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: pincaimao-resume-optimize
description: 聘才猫 - 简历优化 Use when calling Pincaimao Resume Optimization API to automatically optimize or rewrite resume content based on a target job description. Requires PCM_RESUME_OPTIMIZE_KEY env var.
version: 1.0.1
allowed-tools:
  - Bash
metadata:
  openclaw:
    emoji: "✨"
    homepage: https://www.pincaimao.com
    primaryEnv: PCM_RESUME_OPTIMIZE_KEY
    requires:
      env:
        - PCM_RESUME_OPTIMIZE_KEY
      bins:
        - curl
        - python3
---

# 聘才猫 - 简历优化

**REQUIRED:** 请先检查是否已安装 `pincaimao-basic`，若未安装请先安装�

External Script Fetching

High
Category
Supply Chain
Confidence
90% confidence
Finding

Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.

Content

Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.

md
JOB_TITLE="高级销售专员"

# Step 1: 上传简历
UPLOAD=$(curl -s -X POST 'https://api.pincaimao.com/agents/v1/files/upload' \
  -H "Authorization: Bearer $PCM_RESUME_OPTIMIZE_KEY" \
  -F "file=@$RESUME_FILE")
COS_KEY=$(echo "$UPLOAD" | python3 -c "import sys,json; print(json.load(sys.stdin)['cos_key'])")

External Script Fetching

High
Category
Supply Chain
Confidence
90% confidence
Finding

Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.

Content

Scanner excerpt · SKILL.md (reported line 60)May include surrounding context.

md
COS_KEY=$(echo "$UPLOAD" | python3 -c "import sys,json; print(json.load(sys.stdin)['cos_key'])")

# Step 2: 优化简历
curl -s -X POST 'https://api.pincaimao.com/agents/v1/chat/chat-messages' \
  -H "Authorization: Bearer $PCM_RESUME_OPTIMIZE_KEY" \
  -H 'Content-Type: application/json' \
  -d "{

External Transmission

Medium
Category
Data Exfiltration
Confidence
97% confidence
Finding

The file upload step transmits the user's resume to api.pincaimao.com and stores it in external cloud object storage, which materially increases privacy and confidentiality risk. Because resumes often contain names, contact details, employment history, and other personal data, this is a genuine external transmission concern rather than a false positive.

Content

Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.

md
JOB_TITLE="高级销售专员"

# Step 1: 上传简历
UPLOAD=$(curl -s -X POST 'https://api.pincaimao.com/agents/v1/files/upload' \
  -H "Authorization: Bearer $PCM_RESUME_OPTIMIZE_KEY" \
  -F "file=@$RESUME_FILE")
COS_KEY=$(echo "$UPLOAD" | python3 -c "import sys,json; print(json.load(sys.stdin)['cos_key'])")

External Transmission

Medium
Category
Data Exfiltration
Confidence
95% confidence
Finding

This endpoint transmits resume-derived content and job information to a remote AI service for processing. In context, this behavior is core functionality, but it remains security-relevant because it exposes sensitive career data to an external processor and may reveal confidential employer or candidate information.

Content

Scanner excerpt · SKILL.md (reported line 60)May include surrounding context.

md
COS_KEY=$(echo "$UPLOAD" | python3 -c "import sys,json; print(json.load(sys.stdin)['cos_key'])")

# Step 2: 优化简历
curl -s -X POST 'https://api.pincaimao.com/agents/v1/chat/chat-messages' \
  -H "Authorization: Bearer $PCM_RESUME_OPTIMIZE_KEY" \
  -H 'Content-Type: application/json' \
  -d "{

External Transmission

Medium
Category
Data Exfiltration
Confidence
95% confidence
Finding

This endpoint transmits resume-derived content and job information to a remote AI service for processing. In context, this behavior is core functionality, but it remains security-relevant because it exposes sensitive career data to an external processor and may reveal confidential employer or candidate information.

Content

Scanner excerpt · SKILL.md (reported line 60)May include surrounding context.

md
COS_KEY=$(echo "$UPLOAD" | python3 -c "import sys,json; print(json.load(sys.stdin)['cos_key'])")

# Step 2: 优化简历
curl -s -X POST 'https://api.pincaimao.com/agents/v1/chat/chat-messages' \
  -H "Authorization: Bearer $PCM_RESUME_OPTIMIZE_KEY" \
  -H 'Content-Type: application/json' \
  -d "{

Static analysis

No suspicious patterns detected.