← 返回 Skills 市场

Cover Letter Drafter

Name: Cover Letter Drafter
Author: aipoch-ai

作者 AIpoch · GitHub ↗ · v0.1.1 · MIT-0

cross-platform ⚠ suspicious

230

总下载

当前安装

版本数

在 OpenClaw 中安装

/install cover-letter-drafter

功能描述

Generates professional cover letters for journal submissions and job applications in medical and academic contexts.

使用说明 (SKILL.md)

Cover Letter Drafter

Creates tailored cover letters for academic and medical positions.

Features

Journal submission cover letters
Job application cover letters
Fellowship application letters
Customizable templates

Parameters

Parameter	Type	Default	Required	Description
`--purpose`	string	job	No	Cover letter type (journal, job, fellowship)
`--recipient`, `-r`	string	-	Yes	Target journal or institution
`--key-points`, `-k`	string	-	Yes	Comma-separated key points to highlight
`--title`	string	-	No	Manuscript title (for journal submissions)
`--significance`	string	-	No	Significance statement (for journal submissions)
`--author`, `--applicant`, `-a`	string	Applicant	No	Author or applicant name
`--position`	string	-	No	Position title (for job applications)
`--fellowship`	string	-	No	Fellowship name (for fellowship applications)
`--output`, `-o`	string	-	No	Output JSON file path

Usage

# Journal submission cover letter
python scripts/main.py --purpose journal --recipient "Nature Medicine" \
  --key-points "Novel findings,Clinical relevance" \
  --title "Study X" --significance "major advance" --author "Dr. Smith"

# Job application cover letter
python scripts/main.py --purpose job --recipient "Harvard Medical School" \
  --key-points "10 years experience,Published 20 papers" \
  --position "Assistant Professor" --applicant "Dr. Jones"

# Fellowship application
python scripts/main.py --purpose fellowship --recipient "NIH" \
  --key-points "Research excellence,Leadership skills" \
  --fellowship "K99" --applicant "Dr. Lee"

Output Format

{
  "cover_letter": "string",
  "subject_line": "string",
  "word_count": "int"
}

Risk Assessment

Risk Indicator	Assessment	Level
Code Execution	Python/R scripts executed locally	Medium
Network Access	No external API calls	Low
File System Access	Read input files, write output files	Medium
Instruction Tampering	Standard prompt guidelines	Low
Data Exposure	Output files saved to workspace	Low

Security Checklist

No hardcoded credentials or API keys
No unauthorized file system access (../)
Output does not expose sensitive information
Prompt injection protections in place
Input file paths validated (no ../ traversal)
Output directory restricted to workspace
Script execution in sandboxed environment
Error messages sanitized (no stack traces exposed)
Dependencies audited

Prerequisites

No additional Python packages required.

Evaluation Criteria

Success Metrics

Successfully executes main functionality
Output meets quality standards
Handles edge cases gracefully
Performance is acceptable

Test Cases

Basic Functionality: Standard input → Expected output
Edge Case: Invalid input → Graceful error handling
Performance: Large dataset → Acceptable processing time

Lifecycle Status

Current Stage: Draft
Next Review Date: 2026-03-06
Known Issues: None
Planned Improvements:
- Performance optimization
- Additional feature support

安全使用建议

This skill appears to be what it claims: a small local Python tool for drafting cover letters. Before running it, consider these practical cautions: (1) The script will write to whatever path you pass to --output without checking for ../ traversal or restricting destination — avoid passing sensitive system paths and run in a sandboxed workspace. (2) User-supplied fields (recipient, key-points, title, significance, etc.) are interpolated directly into templates without sanitization; do not feed sensitive or untrusted data if you care about leakage or formatting surprises. (3) The SKILL.md lists checklist items (prompt-injection protections, input validation) but the code does not implement them — treat those as TODOs, not guarantees. If you need stronger guarantees, run the script in an isolated environment, review/modify templates to fit your privacy needs, and ensure output paths are safe before enabling automated/autonomous invocation.

功能分析

Type: OpenClaw Skill Name: cover-letter-drafter Version: 0.1.1 The skill is a template-based cover letter generator that appears functionally benign; however, it contains a file system vulnerability. Specifically, `scripts/main.py` accepts an `--output` path argument and writes to it without any sanitization or validation, which allows for arbitrary file writes (path traversal) outside the intended workspace. This risk is explicitly acknowledged but left unaddressed in the security checklist within `SKILL.md`.

能力评估

✓ Purpose & Capability

Name/description match the code and SKILL.md: a small Python script that generates cover letters for journal, job, and fellowship use cases. There are no unexpected binaries, env vars, or cloud credentials requested.

ℹ Instruction Scope

Runtime instructions and examples are scoped to running the local script with CLI args. The code only formats templates and writes JSON output. However, the script will write whatever path is provided to --output without validating or restricting paths (no ../ traversal protection), and user-supplied fields are interpolated directly into templates without sanitization.

✓ Install Mechanism

No install specification — instruction-only plus a small local Python script. Nothing is downloaded or written by an installer.

✓ Credentials

No environment variables, credentials, or config paths are requested. The requested footprint is minimal and proportionate to the stated function.

✓ Persistence & Privilege

always is false and the skill does not request permanent/system-wide changes. It only runs when invoked and writes output to the specified path; it does not modify other skills or global agent config.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install cover-letter-drafter
安装完成后，直接呼叫该 Skill 的名称或使用 /cover-letter-drafter 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.1

- No changes detected from the previous version. - Version number updated to 0.1.1.

v0.1.0

Initial release: Cover Letter Drafter generates tailored cover letters for jobs, journal submissions, and fellowships in academic/medical fields. - Supports journal, job, and fellowship cover letter generation. - Customizable with key points, recipient, title, and significance fields. - Outputs cover letter, subject line, and word count in JSON. - CLI interface with detailed usage instructions. - Includes risk assessment and security checklist. - No extra Python packages required.

元数据

Slug cover-letter-drafter

版本 0.1.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题