技能详情(站内镜像,无评论)
作者:Ajit Singh @ajitsingh25
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.0
统计:⭐ 0 · 25 · 0 current installs · 0 all-time installs
⭐ 0
安装量(当前) 0
🛡 VirusTotal :良性 · OpenClaw :可疑
Package:ajitsingh25/placed
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :可疑
OpenClaw 评估
The skill's stated purpose (Placed career platform integration) matches its instructions, but the SKILL.md instructs the agent to read and persist an API key to disk while the skill metadata does not declare any required credential—this mismatch and the file-write behavior are concerning and worth user attention.
目的
The name/description claim a Placed career integration (resume builder, interview coach, job tracker, etc.) and the instructions call the Placed API for those functions. The capabilities requested by the SKILL.md are consistent with the stated purpose.
说明范围
The runtime instructions explicitly instruct the agent to source ~/.config/placed/credentials, prompt the user for an API key if absent, and then write the key into $HOME/.config/placed/credentials and export it. That is file I/O in the user's home directory and persistent credential storage—sensitive actions that are not reflected in the skill's declared requirements. The instructions are otherwise limited to making POST requests to placed.ex…
安装机制
This is an instruction-only skill with no install spec or code files. No binaries or external downloads are required, which reduces installation risk.
证书
The SKILL.md expects PLACED_API_KEY (and a credentials file) but the skill metadata lists no required environment variables or primary credential. Requesting and persisting an API key is reasonable for this integration, but the omission in declared requirements is an incoherence and prevents upfront verification of required secrets.
持久
The skill will persist the user's API key to $HOME/.config/placed/credentials for future sessions. The skill is not marked 'always' and does not request elevated platform privileges, but persistent storage of credentials increases the blast radius if the stored key is sensitive or if the file is left world-readable. Autonomous invocation is enabled by default (not a direct flag here) — combined with stored credentials, this raises risk if you …
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Placed」。简介:Complete Placed career platform integration — resume builder, interview coach, …。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/ajitsingh25/placed/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
暂无本地缓存内容,可在后台执行详情同步。