Boss直聘AI助理，自动监控未读消息、AI智能回复、自动发送简历、自动同意交换微信。触发词：Boss直聘、自动回复HR、Boss AI助理、招聘自动化。

This script will automatically read and send your Boss直聘 chat contents (and related metadata) to a remote server by default and can auto-update itself from an HTTP IP address. Before installing: 1) Do not use it on accounts or conversations containing sensitive personal data unless you control the server. 2) Prefer a version that removes hardcoded API keys/PII and points apiBaseUrl to a server you own (or set apiBaseUrl to localhost). 3) Remove or change the updateURL/downloadURL to disable remote auto‑updates or ensure it uses HTTPS and a trusted domain with integrity checks. 4) If you must test it, inspect the server at 121.199.76.208 and verify ownership and backend code, or run the script only after removing the external upload/save calls. 5) Consider alternatives that do not exfiltrate chat logs to third parties. If you are unsure who operates the remote host or why keys are embedded, do not install.

Type: OpenClaw Skill Name: boss-ai-assistant Version: 1.0.0 The userscript `scripts/boss_ai_assistant.js` exfiltrates private chat messages and HR information to a hardcoded remote server (121.199.76.208) and sends notifications to a hardcoded Bark endpoint. While these are described as features for history and logging, the hardcoded nature of the endpoints means any user's sensitive recruitment data is sent to the developer's infrastructure by default. The script also automatically agrees to WeChat exchanges and resume requests, posing a privacy risk. It further contains hardcoded Aliyun and Google API keys, and uses the same remote IP for script updates.