by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to do what it says (batch-screen resumes) but has implementation gaps you should address before use:
- Dependency & runtime: The included script requires Python and the pdfplumber package, but the skill metadata doesn't declare these. Ensure the agent environment has Python 3 and pip-installed pdfplumber (pip install pdfplumber) before running Step 1.
- Format support mismatch: The README/SKILL.md advertise DOC/DOCX support, but step1_extract_resumes.py only extracts PDFs. If...详细分析 ▾
⚠ 用途与能力
The skill claims multi-format support (PDF/DOC/DOCX) and integration with a 'java-resume-screener' rule set, but the included script only extracts text from PDF files. The package metadata declares no required binaries or environment (none listed), yet the workflow requires a Python runtime and the pdfplumber library (not declared). This mismatch suggests sloppy packaging and could cause missed resumes (DOC/DOCX ignored) or failed runs.
ℹ 指令范围
SKILL.md scopes the work to extracting resume text, marking matches, scoring, and producing JSON/markdown/CSV reports — all within the stated purpose. It explicitly avoids creating additional scripts and does not instruct contacting external endpoints. However, the skill will read and write resume contents (sensitive personal data) to local files and produce aggregate outputs; privacy/retention handling is not specified and should be considered.
⚠ 安装机制
This is instruction-only (no install spec), which lowers risk, but the README instructs installing pdfplumber via pip. The registry metadata did not declare Python or pdfplumber as requirements. There's no automated install step provided, so runtime failures or a missing dependency are likely if the agent environment doesn't already provide them.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths — appropriate for a local resume-processing tool. There are no requests for unrelated tokens or secrets.
✓ 持久化与权限
always:false and model invocation defaults are unchanged. The skill does write output files (extracted .txt, JSON results, reports) to local directories as part of normal operation; it does not request persistent platform-wide privileges or modify other skills.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/17
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install batch-resume-screener
镜像加速npx clawhub@latest install batch-resume-screener --registry https://cn.longxiaskill.com