← 返回 Skills 市场
donotwannatry

Resume Risk Screen

作者 zyg · GitHub ↗ · v0.1.2 · MIT-0
cross-platform ⚠ suspicious
93
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install resume-risk-screen
功能描述
A skill for screening resumes for authenticity risk, packaging risk, and role fit.
安全使用建议
This skill appears coherent and low-risk from an installation/execution standpoint because it is instruction-only and asks for no credentials. Before installing: (1) Review privacy and compliance requirements — the skill extracts PII (names, phones, emails) and any use of real resumes must follow data-protection rules. (2) Test robustness with synthetic and adversarial inputs — the SKILL.md claims to detect prompt-injection, but do not assume perfect protection. (3) Verify the exact JSON output and its enclosing code block against your ATS parser to avoid integration failures. (4) Limit the agent's access to external sources and avoid feeding it secret or unrelated system data. If you need higher assurance, request the skill author publish provenance (homepage or source repo) or add a lightweight code-based implementation that you can audit.
能力评估
Purpose & Capability
Name/description match the instructions: the SKILL.md defines resume authenticity, packaging, and role-fit checks and prescribes structured JSON output for ATS ingestion. The skill does not request unrelated binaries, credentials, or config paths.
Instruction Scope
The SKILL.md tightly prescribes parsing rules, anti-prompt-injection checks, strict error codes (e.g., INVALID_INPUT), and an exact two-layer deliverable (human summary + machine JSON). This is appropriate for the stated purpose, but the strict output formatting (JSON in a code block with exact required fields) is brittle and should be tested against your ATS parser. The document also instructs extracting contact info and other PII — expected for a resume screener but worthy of privacy review. The pre-scan injection pattern detected appears inside the skill text as part of an anti-injection blacklist (see scan_findings_in_context).
Install Mechanism
No install spec and no code files — instruction-only skill. Low install risk (nothing will be written or executed on disk by an installer).
Credentials
The skill requires no environment variables or external credentials. It does request extraction of sensitive personal data (names, phone numbers, emails) which is proportional to resume screening but imposes privacy/compliance obligations (PII handling, retention, access controls).
Persistence & Privilege
always:false and no special persistence requested. The skill does not request to modify other skills or system-wide config. Autonomous invocation is allowed (platform default) but not a risk by itself here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install resume-risk-screen
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /resume-risk-screen 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.2
Added candidate name/contact extraction and explicit empty array states for flawless resumes
v0.1.1
Refactor with P8 standards: Anti-injection bounds, strict JSON schema, metric thresholds
v0.1.0
Initial release
元数据
Slug resume-risk-screen
版本 0.1.2
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Resume Risk Screen 是什么?

A skill for screening resumes for authenticity risk, packaging risk, and role fit. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 93 次。

如何安装 Resume Risk Screen?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install resume-risk-screen」即可一键安装,无需额外配置。

Resume Risk Screen 是免费的吗?

是的,Resume Risk Screen 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Resume Risk Screen 支持哪些平台?

Resume Risk Screen 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Resume Risk Screen?

由 zyg(@donotwannatry)开发并维护,当前版本 v0.1.2。

💬 留言讨论