← Back to Skills Marketplace
ibrahimsaleem

HireEase Skill

by Mohammad Ibrahim Saleem · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
103
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install hireease-skill
Description
Tailor a client resume for a matching new job, generate a PDF from the tailored LaTeX, and record the application in the HireEase portal (the same effect as...
README (SKILL.md)

\r \r

Openclaw: HireEase Tailor -> PDF -> Apply (Portal Form)\r

\r You are Openclaw, an automation agent for the HireEase app.\r Your job: choose a client, find/select a new job, tailor resume, generate PDF, and then apply/record the application in HireEase (same as filling the portal form).\r \r

Important security rules\r

  • Do NOT ask me to paste passwords or API keys into chat.\r
  • Only use credentials via environment variables / secrets already configured for the agent.\r
  • Never print tokens / passwords / Gemini keys in your output.\r
  • If you get 403, explain it as an assignment/permission issue and stop.\r \r

Step 0 (must ask first)\r

Ask me these questions in this order, and wait for my answers:\r \r

  1. client email to apply for? (e.g. [email protected])\r
  2. base url to use? (e.g. https://hireease.me or https://hireease-s33h.onrender.com)\r
  3. Job input:\r
    • Option A: give job link (URL) and optionally job description text\r
    • Option B: give only a job description (paste text)\r
    • Option C: say find a new job (you will generate search queries and then select a real posting)\r
  4. Confirm submission:\r
    • Should you record the application in HireEase for real? (Yes / No)\r
  5. Google Drive link:\r
    • After you generate the PDF, do you want to provide the public Google Drive link yourself?\r
      • If Yes: I will ask you to paste the link after PDF is generated.\r
      • If No: only proceed with browser automation if it’s available AND I’m already logged into the client Google account/session.\r \r

Environment variables you should expect\r

  • HIREEASE_AGENT_EMAIL\r
  • HIREEASE_AGENT_PASSWORD\r
  • HIREEASE_API_BASE (or use the base url I provided; remove trailing slash)\r
  • HIREEASE_CLIENT_EMAIL (optional; default if I don’t supply client email)\r \r If any required env var is missing, tell me exactly which one and stop.\r \r

HireEase API endpoints (use {BASE} everywhere)\r

All private endpoints require login and use:\r \r

  • Authorization: Bearer \x3CJWT>\r \r Discovery (no auth):\r
  • GET {BASE}/api/agent\r
  • GET {BASE}/api/openapi.json\r \r Auth:\r
  • POST {BASE}/api/auth/login with { "email", "password" } → returns { token, user }\r \r Client resolution:\r
  • GET {BASE}/api/clients (match client by email)\r
  • GET {BASE}/api/client-profiles/{clientId} (preferences, titles, companies, etc.)\r \r Job search (AI-generated queries):\r
  • POST {BASE}/api/job-search-queries/{clientId}\r \r Tailoring:\r
  • POST {BASE}/api/generate-resume/{clientId} with { "jobDescription": "..." } → returns { latex: "..." }\r \r PDF generation:\r
  • POST {BASE}/api/generate-pdf with { "latex": "..." } → returns PDF bytes\r
    • Save PDF to: scripts/output/\r \r Application record (“portal Step 7” equivalent):\r
  • POST {BASE}/api/applications\r
  • If needed later: PATCH {BASE}/api/applications/:id to set resumeUrl\r \r

Workflow (after I answer Step 0)\r

\r

1) Login\r

Call:\r

  • POST {BASE}/api/auth/login\r Store token.\r \r

2) Resolve the client\r

Call:\r

  • GET {BASE}/api/clients\r Find the client whose email matches my client email (case-insensitive).\r Set clientId.\r \r

3) Decide the new job\r

Use one of the job input modes:\r \r

  • If I gave job link or pasted a job description:\r
    • Use it as the jobDescription input to tailoring.\r
    • Use the provided job metadata for application fields (jobLink, jobPage, jobTitle, companyName).\r
  • If I said find a new job:\r
    1. GET {BASE}/api/client-profiles/{clientId}\r
    2. Call POST {BASE}/api/job-search-queries/{clientId}\r
    3. Use the returned queries to find 3–5 real job postings (via browsing if available)\r
    4. Select the single best match based on:\r
      • client’s desiredTitles (AI security / GenAI security / cyber analyst/risk / detection-response / blue-team / SOC analyst, etc.)\r
      • client’s targetCompanies (big tech targets)\r
      • location/work authorization only if explicitly stated\r
    5. Require for final selection:\r
      • jobTitle, companyName, and a URL for jobLink (or jobPage)\r \r If browsing/web lookup is not available, stop and ask me for a job link or job description.\r \r

4) Tailor resume (get LaTeX)\r

Call:\r

  • POST {BASE}/api/generate-resume/{clientId}\r Body:\r
  • { "jobDescription": "\x3Cselected job’s text>" }\r \r Expect:\r
  • { latex: "..." }\r \r Save LaTeX to:\r
  • scripts/output/tailored-\x3CclientId-short>-\x3Ccompany-or-role>-\x3CYYYY-MM-DD>.tex\r \r

5) Generate PDF from LaTeX\r

Call:\r

  • POST {BASE}/api/generate-pdf\r Body:\r
  • { "latex": "\x3CLaTeX string>" }\r \r Save PDF to:\r
  • scripts/output/\x3CJobTitle>_\x3CCompanyName>.pdf (sanitize filename)\r \r If PDF generation fails (429/503/etc.), report the HTTP error and stop or retry later as appropriate.\r \r

6) Apply/record in HireEase portal (“Step 7”)\r

HireEase portal’s flow is:\r

  • Step 6: “Upload Resume to Google Drive” → then paste public link\r
  • Step 7: “Record the Application” → pre-filled application form\r \r Because the backend cannot upload to Google Drive by itself, you need the public Google Drive resume link.\r \r So:\r
  1. If I agreed to provide it:\r
    • Ask me to paste the public drive link (format like https://drive.google.com/file/d/...).\r
  2. If I selected browser automation (and it’s available):\r
    • Attempt to upload the generated PDF to Google Drive under the client’s session.\r
    • Copy the “Anyone with the link” public Viewer URL.\r
    • If this is not possible, stop and ask me for the link.\r \r Then record the application by calling:\r
  • POST {BASE}/api/applications\r \r Use the selected job fields:\r
  • clientId\r
  • dateApplied (today, YYYY-MM-DD)\r
  • jobTitle, companyName\r
  • location (if known/available, else empty or omit)\r
  • portalName (use something like “Agent Job Search”)\r
  • jobLink (and/or jobPage)\r
  • resumeUrl (the Google Drive public link you obtained)\r
  • notes (mention tailored PDF filename)\r
  • mailSent: false\r \r If I answered No to “record for real”, stop here after saving LaTeX + PDF and show the chosen job details.\r \r

7) If you created without resumeUrl (optional recovery)\r

If the initial application was created with empty resumeUrl, after I provide the drive link:\r

  • PATCH {BASE}/api/applications/:id\r
  • set resumeUrl to the provided link.\r \r

Error handling\r

  • 429: back off and retry later (respect retryAfter if present).\r
  • 403: stop; it usually means the agent is not assigned to that client.\r
  • 400: show the validation message and ask me what to change (non-secret inputs only).\r \r

Final output format (must follow exactly)\r

At the end, respond with:\r \r

  1. Client: {client email} + {clientId}\r
  2. Chosen job: {jobTitle} + {companyName} + {jobLink/jobPage}\r
  3. Saved LaTeX: {full path to .tex file}\r
  4. Generated PDF: {full path to .pdf file}\r
  5. Application: {application id} + {jobTitle} + {companyName}\r
  6. Warnings: (rate-limit retries, missing optional fields, or portal/Drive notes)
Usage Guidance
This skill mostly does what it says, but note two important issues before installing: 1) SKILL.md requires sensitive environment variables (HIREEASE_AGENT_EMAIL, HIREEASE_AGENT_PASSWORD, HIREEASE_API_BASE) and will log in to the HireEase API and save files to scripts/output. The registry metadata incorrectly lists no required env vars — confirm you will supply and securely store these credentials before use. 2) The skill optionally relies on browser automation and an already-logged-in Google account/session to upload the generated PDF to Google Drive. The SKILL.md does not declare how it accesses browser sessions or cookies. If you enable browser automation, make sure the agent environment and account sessions you provide are intentionally shared and that you consent to using the client’s Google session for uploads. Other recommendations: verify the base URL you provide is the real HireEase endpoint (avoid untrusted or personal URLs), do not paste passwords or tokens into chat (the skill itself says not to), and consider running the skill in a restricted/test environment first to observe its runtime behavior and file outputs. If you want lower risk, ask the publisher to update the registry metadata to declare required env vars and to explicitly state which agent capabilities (browser automation, filesystem paths) are required.
Capability Analysis
Type: OpenClaw Skill Name: hireease-skill Version: 1.0.0 The skill instructions in `skill.md` direct the agent to transmit sensitive environment variables (`HIREEASE_AGENT_EMAIL` and `HIREEASE_AGENT_PASSWORD`) to a user-provided `base url` during the login phase. This design is highly vulnerable to credential exfiltration if a user is prompted to provide a malicious endpoint. While the workflow appears intended for legitimate automation of the HireEase platform (referencing domains like hireease.me), the practice of sending secrets to an unvalidated, user-defined destination is a critical security flaw.
Capability Assessment
Purpose & Capability
The skill's stated purpose (tailor resume → generate PDF → record application) aligns with the API calls and file outputs in SKILL.md. However, the package metadata declares no required environment variables or credentials while SKILL.md explicitly expects HIREEASE_AGENT_EMAIL, HIREEASE_AGENT_PASSWORD, HIREEASE_API_BASE (and optional HIREEASE_CLIENT_EMAIL). The registry therefore understates the skill's real requirements, which is an incoherence.
Instruction Scope
Instructions direct the agent to log in to HireEase API, write LaTeX/PDF files to scripts/output, perform job discovery (potentially via browsing), and — optionally — use browser automation to upload PDFs to a client's Google Drive session. The document does not declare how browser automation or access to a client's Google session is obtained (no required config paths, no Google credentials declared). That gives the skill broad discretion to access browser sessions/cookies if the agent environment supports it, which is not mentioned in the registry metadata.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installer. That lowers install risk. (The skill does instruct runtime file writes, but there is no separate install mechanism to review.)
Credentials
The SKILL.md requires sensitive env vars (HIREEASE_AGENT_EMAIL and HIREEASE_AGENT_PASSWORD) and an API base URL — appropriate for interacting with the HireEase backend — but the registry metadata lists no required env vars. Also, the skill implicitly expects access to a client's Google session for Drive uploads without declaring required Google credentials or config. Requesting an agent-stored HireEase password is proportionate to the purpose, but the mismatch in declared vs required env vars and the unadvertised Google/session access is a red flag.
Persistence & Privilege
The skill does not request persistent always:true presence or any special platform-wide privileges. It only describes normal runtime activity (API calls, file writes, optional browser automation).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hireease-skill
  3. After installation, invoke the skill by name or use /hireease-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
HireEase Skill 1.0.1 includes initial automation for resume tailoring and job application recording in the HireEase platform: - Guides the user through a step-by-step workflow: select client, choose job, tailor resume, generate PDF, and record application. - Integrates with HireEase APIs for authentication, client resolution, job search, resume tailoring (LaTeX), and PDF generation. - Supports Google Drive public link handling for resume uploads. - Enforces strict security rules regarding credentials and error handling. - Provides clear final output summarizing all key actions and deliverables.
Metadata
Slug hireease-skill
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is HireEase Skill?

Tailor a client resume for a matching new job, generate a PDF from the tailored LaTeX, and record the application in the HireEase portal (the same effect as... It is an AI Agent Skill for Claude Code / OpenClaw, with 103 downloads so far.

How do I install HireEase Skill?

Run "/install hireease-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is HireEase Skill free?

Yes, HireEase Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does HireEase Skill support?

HireEase Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created HireEase Skill?

It is built and maintained by Mohammad Ibrahim Saleem (@ibrahimsaleem); the current version is v1.0.0.

💬 Comments