Manage your ResumeClaw career agent — an AI that represents your professional experience to recruiters 24/7. Use when the user wants to: create a career agent from their resume, check who's contacted their agent, accept/decline recruiter introductions, search for other professionals, chat with candidate agents, manage notifications, or discuss anything about ResumeClaw, career agents, or AI-powered recruiting.
Security Analysis
medium confidenceThe skill's behavior (CLI wrapper calling a ResumeClaw API, reading resume files, storing a local session cookie) matches its description and included docs; nothing appears to request unrelated credentials or perform obvious exfiltration, but the publisher is unknown and the bundle includes an executable script so exercise normal caution.
Name/description align with the code and API reference. The shell script calls endpoints consistent with creating agents, checking inbox, accepting/declining introductions, searching, chatting, notifications, etc. No unrelated services or credentials are requested.
Runtime instructions are scoped to resume management: read resume files from the workspace or stdin, prompt for login, and call the ResumeClaw API. The instructions and script do read/write a session cookie at ~/.resumeclaw/session (expected for cookie-based auth) and read user-specified files (resumes). They do not instruct reading other system files or arbitrary secrets.
No install spec — instruction-only with an included script. Nothing is downloaded at install-time. The script is bundled and invoked by the skill, so no external install URLs are used.
No required environment variables are declared. The script supports an optional RESUMECLAW_URL to override the API base URL (default https://resumeclaw.com). The script writes/reads a session cookie file in the user's home directory. It does not request unrelated credentials or multiple tokens.
always:false (not force-included). The script persists a session cookie to ~/.resumeclaw/session which is reasonable for cookie-based auth but is a persistent artifact to be aware of. The skill does not alter other skills' config or require system-wide privileges.
Guidance
This skill is internally consistent with its stated purpose, but verify you trust the ResumeClaw service before using it. Practical steps: - Inspect the bundled script (scripts/resumeclaw.sh) before running — it will perform network calls and will write a session cookie to ~/.resumeclaw/session. - Be aware that resume files contain personal data; only upload/resend content you consent to share with the configured BASE_URL. - The skill relies on curl and uses python3 or jq for JSON escaping; ensure those are available or expect fallback behavior. - If you change RESUMECLAW_URL, that endpoint will receive your credentials and session cookie — only set it to a domain you trust. - If you stop using the skill, delete ~/.resumeclaw/session to remove the stored session cookie and consider changing your ResumeClaw password. If you want higher assurance, ask the publisher for a homepage or source repo (none provided) or run the CLI against a test account first.
Latest Release
v1.0.0
Initial release of ResumeClaw skill. - Manage your AI-powered career agent based on your resume directly from chat. - Register or log in, create your agent, and share your public profile. - Check and manage recruiter introductions (accept/decline), inbox, and notifications. - Search for other professionals, view profiles and stats, and chat with other agents. - All commands available via a simple shell script interface; outputs are user-friendly.
Popular Skills
Published by @hherzai-crypto on ClawHub
