Digital Identity, CV & Resume Creator

• Analyzed: May 12, 2026, 3:19 AM
• Findings: 1
• Version: 5.2.4
• Hash: 70714f382ebcea19db313514acb3983f608f597847b95e24b9190231a0b6939b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for CV creation is classified as benign. The documentation (SKILL.md, shared/privacy.md, shared/access.md, reference/hitl.md) is exceptionally thorough, emphasizing user consent, data privacy, and secure handling of sensitive information like `TALENT_ACCESS_ID` and `claim_token`. It provides explicit instructions on verifying `X-HITL-Signature` for callbacks and securely managing `submit_token`s, directly addressing common security vulnerabilities. While the skill offers capabilities like direct CV creation (`skip_hitl: true`) and webhook callbacks (`hitl_callback_url`) which could be misused if an agent developer ignores security advice, the documentation clearly outlines their intended use and associated risks, demonstrating a strong intent for secure operation rather than malice.