Resume Score for the resume

AI简历评分助手。根据用户上传的简历（含Markdown文本或文件），按照AI领域满分/及格线两份参考简历为基准，计算简历能力值（满分100分）。若简历非AI领域，则进行跨行业等价换算，评估该简历在其所属行业的能力水平。

This skill appears coherent and self-contained: it scores resumes using local Python code and templates and does not ask for credentials or external installation. Before using it, consider: (1) Only provide resume files you intend the skill to read (it will parse any path you supply). (2) The scoring is keyword/regex-based and may misclassify fields or industry; treat the output as advisory, not definitive. (3) If you need stronger privacy guarantees, review the full scripts (scripts/resume_scorer.py and any remaining JS in assets) to confirm there are no hidden network calls in code portions not shown, or run the scorer in a trusted, offline environment. (4) Don't paste highly sensitive personal data unless you accept the privacy tradeoffs of processing those contents.

Type: OpenClaw Skill Name: unclecheng-ai-resume-judge Version: 1.0.0 The skill bundle contains a resume scoring engine that exhibits risky file handling behavior. Specifically, `scripts/resume_scorer.py` attempts to open and read any input string that looks like a file path without sanitization or validation, which could be exploited to read arbitrary local files. Furthermore, the script contains a hardcoded absolute output path (`C:/Users/UncleC/Desktop/...`), indicating poor security hygiene and potential for unauthorized file writes on specific systems. While these appear to be unintentional vulnerabilities rather than intentional malice, they pose a risk to the host environment.