v1.2.0

简历评估器

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:37 AM.

Analysis

This is a coherent instruction-only resume review skill, but it will read resume files and surface personal candidate details in its output.

GuidanceBefore using it, place only the intended resumes in the selected folder and be mindful that the generated table may contain candidate personal data such as age, education, school, and prior employer.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

tools: 
  - builtin/fs
  - builtin/document_reader

The skill requests filesystem and document-reading tools. This is expected for batch resume evaluation, but it means the agent can read local documents selected for the task.

User impactIf pointed at the wrong folder, the agent could read unintended local documents, though the instructions limit the workflow to user-specified resume files.

RecommendationUse a dedicated folder containing only the resumes you intend to evaluate.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityLowConfidenceHighStatusNote

SKILL.md

| 姓名 | 年龄 | 学历 | 学校 | 工作年限 | 上家公司 | 匹配得分 | 建议评级 | 核心技术栈 | 契合度评价（50字内） |

The required output includes personal and employment details extracted from resumes. The artifacts do not show persistence or sharing, but the data will enter the agent context and final response.

User impactCandidate personal information may be displayed in the generated evaluation table.

RecommendationConfirm you have permission to process these resumes and avoid sharing the output beyond the intended hiring workflow.