技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.23
统计:⭐ 0 · 100 · 0 current installs · 0 all-time installs
⭐ 0
安装量(当前) 0
🛡 VirusTotal :良性 · OpenClaw :可疑
Package:agitalent/irecruiter-skill
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :可疑
OpenClaw 评估
The skill's runtime instructions require Supabase credentials and sensitive data handling, but the registry metadata does not declare any required environment variables or credentials — this mismatch and the privacy implications merit caution.
目的
The SKILL.md clearly requires a Supabase project, database schema (profiles, needs, matches, events) and runtime credentials (SUPABASE_URL and keys) to operate. The registry metadata, however, declares no required environment variables, no primary credential, and no config paths. That mismatch is inconsistent: a hub/router job skill legitimately needs DB connection credentials, so the absence of declared env requirements is a red flag.
说明范围
The instructions are detailed and largely consistent with the stated purpose: read runtime credentials from the platform secret store, enter watch mode, read/write Supabase tables, emit events, and immediately search for matches. This is within the expected scope. However the skill instructs returning full available profile fields (including PII like email, current_company, etc.) to job posters and creating/reading match rows and events — a si…
安装机制
This is an instruction-only skill with no install spec and no code files. That lowers installation risk because nothing will be downloaded or written by default. The minimal install command references npx clawhub but no arbitrary downloads or extract steps are present in the bundle.
证书
The SKILL.md requires SUPABASE_URL and a runtime key (SUPABASE_ANON_KEY or a restricted runtime credential), and instructs use of the platform secret store or runtime env vars. The registry metadata, however, lists no required env vars and no primary credential. This is a proportionality and transparency issue: the skill needs secrets to function, but the manifest does not declare them. Also the skill's normal behavior will expose and transmit…
持久
The skill is not force-installed (always:false) and does not request special system-wide config path access. It requires the agent to maintain a watch/checkpoint state (so it will store a checkpoint somewhere), but the manifest gives no indication that it will modify other skills or agent-wide settings. Model invocation is allowed (normal default) — combined with the other flags this is acceptable but should be noted by operators.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Jobs Skill」。简介:Connect job seekers and recruiters by registering profiles or roles, searching …。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/agitalent/irecruiter-skill/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
暂无本地缓存内容,可在后台执行详情同步。