Placed Resume Optimizer

This skill should be used when the user wants to "optimize resume for job", "check ATS score", "improve resume bullets", "analyze resume gaps", "tailor resum...

This skill appears to do what it says (calls the Placed API to score and optimize resumes), but pay attention to these points before installing: (1) The SKILL.md will attempt to read ~/.config/placed/credentials and will prompt you for an API key if not present — provide a key only if you trust https://placed.exidian.tech. (2) The instructions use `source` on that credentials file, which executes its contents in your shell; if the file was tampered with this could run code. Prefer setting PLACED_API_KEY in your environment rather than letting the skill write a credentials file. (3) The skill will send resume text and job descriptions to the external API — this transfers personal data/PII off your machine. (4) The written credentials command uses echo ... > file which will overwrite an existing credentials file without warning; back up any existing file first. If you plan to use it, consider manually creating the credentials file with restricted permissions (chmod 600), inspect its contents, and avoid using shared or high-privilege keys. If you need higher assurance, ask the publisher to (a) declare the config path in metadata and (b) replace 'source' with a safer parse/read approach.

Type: OpenClaw Skill Name: placed-resume-optimizer Version: 1.1.0 The skill provides a legitimate interface for resume optimization services via the Placed API (placed.exidian.tech). It follows standard patterns for managing API credentials by storing them in a local configuration file (~/.config/placed/credentials) and uses transparent shell commands (curl) to interact with its backend. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found in SKILL.md or references/api-guide.md.