Recruitment Agent

招聘Agent：通过 opencli(Boss直聘) + lark-cli(飞书多维表格) 管理招聘流程。支持：(1) 查看Boss直聘最近/未读消息; (2) 将候选人存入人才库（先搜索比对，再新建/更新）; (3) 添加人才决策记录（加入库/约面试/跟进/发Offer/归档）; (4) 更新人才库中某候选人的...

Do not install or grant credentials yet. Questions and steps before using: (1) Ask the publisher to update the skill metadata to list required binaries (opencli, lark-cli), required environment variables/credentials (Base Token, talent table_id, decision table_id, user open_id/name) and explain where those secrets are stored and who can access them. (2) Confirm how CronCreate jobs are managed: which system/account runs them, how to review/stop them, and whether they run with least privilege. (3) Verify the CLIs' permissions (can lark-cli act as a bot and create events/send messages?) and supply only least-privilege tokens. (4) Be aware this skill reads private chat messages and extracts PII (phone/WeChat) and will store/send that data — ensure this is acceptable under your privacy/compliance rules. (5) If you proceed, test in a sandbox account (not production) and retain the ability to revoke tokens and delete scheduled jobs. If the publisher cannot or will not provide clear metadata and an install/run security model, treat the skill as untrusted.

Type: OpenClaw Skill Name: recruitment-agent Version: 1.3.0 The recruitment-agent skill automates candidate management by integrating Boss Zhipin (via opencli) and Lark/Feishu (via lark-cli). It features complex workflows for data synchronization, calendar management, and automated messaging. Notably, it utilizes the CronCreate tool (in heartbeat_task.md) to establish a persistent background task for polling candidate replies. While the behavior is clearly aligned with its stated recruitment purpose, the skill's broad permissions—including access to PII, enterprise communication channels, and scheduled execution capabilities—warrant a suspicious classification under the provided security threshold.