Resume / CV Builder

• Risk level: Low
• Analyzed: May 1, 2026, 4:55 AM
• Findings: 1
• Version: 1.0.0

Overview

This appears to be a benign instruction-only resume builder, with only a minor provenance note because the homepage/source metadata looks placeholder or unverified.

This skill is reasonable to install as an instruction-only resume helper. Resume content can contain personal information, so only provide details you are comfortable using in the session, and verify the project source if provenance matters to you.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

Users cannot fully verify the project source from the provided homepage metadata.

Why it was flagged

The homepage appears to use a placeholder GitHub path rather than a verifiable project repository. Because this is instruction-only and has no code or install script, this is a provenance note rather than a security concern.

Skill content

homepage: https://github.com/your-username/resume-builder-skill

Recommendation

Use it as an instruction template, and verify the publisher or repository independently before relying on future updates or adding executable components.