Resume-to-Tags

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill is coherent for turning user-provided resumes into tags and a Feishu table, but users should notice that it processes sensitive resume data and writes to a Feishu workspace.

Install/use this only if you are comfortable processing candidate resumes with the configured LLM and Feishu workspace. Confirm the target Feishu account/table, review extracted tags before batch insertion, and avoid providing resumes or contact details you are not authorized to process.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Resume contents and extracted candidate information may be processed by an LLM and stored in Feishu.

Why it was flagged

The documented workflow sends resume-derived information through an LLM extraction step and into Feishu records, which is expected for the skill but involves candidate personal data.

Skill content
接受简历文本/文件 → LLM 提取原子标签(含近义词扩展) → 创建飞书多维表格... → 批量录入候选人
Recommendation

Use only resumes you are authorized to process, confirm the intended Feishu workspace/table, and avoid including unnecessary sensitive details.

What this means

If run with the wrong Feishu account or target table, it could create unwanted candidate records or alter fields.

Why it was flagged

The skill uses Feishu account authority to create records and delete table fields. This is purpose-aligned, but it is persistent workspace mutation.

Skill content
feishu_bitable_app_table_record (action=batch_create) ... feishu_bitable_app_table_field (action=delete)
Recommendation

Review the Feishu destination and requested actions before allowing table creation, batch insertion, or field deletion.

What this means

A resume could cause incorrect or misleading tags to be generated and later stored.

Why it was flagged

The script places raw resume text directly into the LLM prompt. A malicious or unusual resume could try to influence the model's extraction output.

Skill content
## 简历内容\n{text[:5000]}\n\n请仅输出 JSON,不要其他文字。
Recommendation

Review the generated JSON/tags before batch-creating Feishu records, especially for resumes from untrusted sources.