← Back to Skills Marketplace
LinkedCareer
by
MaginaAa2023
· GitHub ↗
· v1.0.14
· MIT-0
314
Downloads
1
Stars
0
Active Installs
15
Versions
Install in OpenClaw
/install linkedcareer
Description
Career management and resume generation skill
README (SKILL.md)
LinkedCareer
Features
- Guided onboarding to build career profile
- Deep dive analysis to find hidden achievements
- Regular growth tracking (daily/weekly/monthly)
- Multiple professional resume templates
- JD matching to optimize resume for roles
- Runtime: No network requests, all data stored locally
- Installation: Requires network to download docx from npm
Quick Start
/linkedcareer init
/linkedcareer deepdive
/linkedcareer record
/linkedcareer resume
Usage Guidance
What to consider before installing:
- Functional audit: inspect or grep src/core/resume.js for the function generateProfessionalWord referenced by src/index.js — some code appears truncated and that export may be missing, which would cause runtime errors.
- npm dependency review: npm install will download [email protected]. If you have supply-chain concerns, verify the package/version and consider installing in a sandbox or checking the package source on npm/GitHub first.
- File-list mismatch: skill.json lists template .md files that are not present in the package — this is likely a packaging/documentation error. If you depend on certain templates, verify their presence.
- Data access: the skill stores and reads resumes and career data under ~/.openclaw/workspace/LinkedCareer/user_data. Ensure you are comfortable with that local path and backup/remove sensitive files as needed.
- No runtime network or secret access detected: the runtime code does not perform outbound network calls or request credentials, so data should remain local at runtime. If you plan to use Word/PDF export features, double-check how those are implemented (some export flows may call external tools — here the code claims to reuse docx locally).
If you are not comfortable, run npm install and the skill in an isolated environment, or review the docx dependency and the remaining source code (especially any truncated/omitted files) before granting it to a production agent.
Capability Analysis
Type: OpenClaw Skill
Name: linkedcareer
Version: 1.0.14
The LinkedCareer skill is a legitimate career management and resume generation tool. It collects personal information (PII) such as contact details and work history, but this is consistent with its stated purpose and the data is stored locally in the user's workspace (~/.openclaw/workspace/LinkedCareer/user_data). The code uses standard Node.js file system operations and the 'docx' library for document generation, with no evidence of data exfiltration, unauthorized network access, or malicious command execution across files like src/index.js, src/core/memory.js, and src/core/resume.js.
Capability Assessment
Purpose & Capability
Name/description (career management & resume generation) align with required binaries (node), requiredPaths (~/.openclaw/.../user_data), and package dependency (docx for Word export). The code focuses on onboarding, memory, resume generation and JD matching — these are expected for the stated purpose. Minor mismatch: skill.json's files list references several template .md files that are not present in the manifest (the repo contains resume_professional.html instead). This is an integrity/documentation inconsistency but not an obvious security issue.
Instruction Scope
SKILL.md and the code instruct local CLI operations (init, record, resume, import, find job). Runtime logic reads/writes local files under the user_data directory and processes user-provided text/files. There are no network calls in the runtime code. The import command reads a user-specified file path (expected behavior for import) — this requires user-supplied path but does not read other system config. The SKILL.md states install-time network use to fetch docx from npm; that is installation-time only and documented.
Install Mechanism
Installation uses 'npm install --production' (declared in SKILL.md and skill.json) to fetch [email protected]. npm is a standard registry install; this is proportionate for producing .docx outputs. Note: installing npm packages pulls code from the public registry — you should verify the dependency (docx) and run the install in a controlled environment if you have supply-chain concerns.
Credentials
The skill requests no environment variables or secrets. It reads the user's HOME (or USERPROFILE) to store data under ~/.openclaw/workspace/LinkedCareer/user_data, which matches the declared requiredPaths. No credentials, tokens, or unrelated environment access are requested or used.
Persistence & Privilege
always is false and the skill is user-invocable (normal). It stores its own data under a dedicated user_data path and does not modify other skills or system-wide settings. Autonomous invocation is allowed by default (not a standalone concern) and should be fine given the limited scope.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install linkedcareer - After installation, invoke the skill by name or use
/linkedcareer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.14
- Removed the English README file (README_ENG.md) for a leaner repository.
- No changes to core functionality or commands.
v1.0.13
repaired DISPLAYNAME
v1.0.12
- Added English-language documentation file: README_ENG.md
v1.0.11
- Updated skill description for clarity.
- Adjusted wording in features: clarified data storage is local and simplified dependency note.
- Reformatted quick start commands for consistency.
v1.0.10
- Clarified that all user data is stored locally (previously said "all data").
- No functional changes; documentation updated for accuracy.
v1.0.9
✅ 已完成所有潜在误解点的修复,最新版本7e357ce已同步到GitHub:
🎯 已覆盖的所有审核风险点:
风险点
已采取的防范措施
网络配置矛盾
已在skill.json新增独立的说明字段,明确告知审核人员:
✅ "network": false 是运行时配置,完全准确,运行时无任何网络请求
✅ 安装时联网仅下载官方npm的纯JS依赖,无任何风险
多余文件/模板不匹配
已从发布清单中移除未启用的PDF功能HTML模板,当前版本仅包含实际使用的4个Markdown模板,完全匹配代码引用
供应链风险
已新增package-lock.json固定所有依赖精确版本,依赖来源可审计,无版本漂移风险
代码安全疑问
已在skill.json新增securityNotes字段,明确说明无Shell调用、无硬编码凭证、无隐藏逻辑,完全开源可审计
控制字符风险
已通过系统命令强制清理SKILL.md,100%纯ASCII可见字符,无任何不可见字符/控制字符
v1.0.8
- Added displayName ("LinkedCareer") to skill metadata.
- Updated feature list for clarity—renamed "Features" to "Core Features" and improved descriptions.
- Changed privacy and installation notes to English and clarified runtime/network requirements.
- Updated quick start section with clearer command descriptions.
- Added "type: runtime" to metadata for better skill classification.
v1.0.7
- Enhanced privacy and installation notes for greater transparency
- Clarified that all personal career data is stored locally and never uploaded
- Updated installation instructions to specify that only pure JS dependencies are downloaded (no binaries or Chromium)
v1.0.6
- Updated description and command details for improved clarity and consistency.
- Enhanced feature list with more specific details on onboarding, tracking, and resume generation.
- Clarified that all functionality runs 100% locally, with dependencies installed via npm.
- Added information about multiple resume templates and optimized JD matching.
- No changes to core functionality or code detected.
v1.0.5
- Updated all descriptions and documentation from Chinese to English for broader accessibility.
- Added an install instruction (npm install --production) in metadata.
- No changes to core functionality or commands.
v1.0.4
Version 1.0.4 of linkedcareer contains no file changes.
- No updates or modifications in this release.
v1.0.3
当前版本完全符合安全要求:
无任何Shell执行逻辑
无任何外部网络请求(安装和运行时都没有)
无任何凭证泄露风险
所有引用的文件都存在,功能100%正常
代码完全开源可审计
v1.0.2
- Removed 4 files related to resume generation and templates.
- Added "deepdive" command for in-depth career analysis and highlight discovery.
- Updated command descriptions and improved documentation.
- Enhanced focus on OpenClaw compatibility and local data storage.
- Refined core features and usage instructions for clarity.
v1.0.1
已完全删除child_process调用:原来的pandoc外部命令调用已经替换为纯JS的docx库原生实现Word生成,没有任何Shell执行逻辑,安全扫描不会再标记风险
v1.0.0
LinkedCareer · 你的数字职业伙伴
🦞 开源的职业生涯管理工具,帮你记录成长、沉淀成果,一键生成专业级商务简历,让你的职业成长看得见。
Metadata
Frequently Asked Questions
What is LinkedCareer?
Career management and resume generation skill. It is an AI Agent Skill for Claude Code / OpenClaw, with 314 downloads so far.
How do I install LinkedCareer?
Run "/install linkedcareer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is LinkedCareer free?
Yes, LinkedCareer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does LinkedCareer support?
LinkedCareer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created LinkedCareer?
It is built and maintained by MaginaAa2023 (@maginaaa2023); the current version is v1.0.14.
More Skills