📦 Company Intel — 面试情报速建
v1.0.1一键抓取并结构化公司公开信息，自动生成面试要点、业务背景与竞争优势速览，帮助候选人在短时间内完成高效、精准的面试准备。
0· 280·1 当前·1 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill expects a local service at http://127.0.0.1:8010/api/company/intel even though the manifest doesn't say so. Before installing or invoking it: (1) confirm you run and trust a local backend on port 8010 that implements this endpoint; (2) avoid sending sensitive credentials or private JD text unless you control and trust that service; (3) if you don't run such a service, the skill will fail harmlessly, but if you do run other local services bound to that port they could receive the POSTe...详细分析 ▾
ℹ 用途与能力
The skill's stated purpose (build company intel) matches the actions in SKILL.md (POST to an /api/company/intel endpoint and parse structured results). However the skill does not declare or document that it requires a local backend running on 127.0.0.1:8010; that runtime dependency is implicit in the instructions and not mentioned in the description or registry metadata.
⚠ 指令范围
Runtime instructions instruct the agent to POST user-provided data to http://127.0.0.1:8010/api/company/intel and parse the response. The instructions do not read local files or env vars, but the unconditional network call to localhost can reach any service bound to that port on the user's machine. Because the skill doesn't document this dependency, a user could unknowingly route sensitive inputs to an unintended local service.
✓ 安装机制
No install spec and no code files are included (instruction-only). This minimizes disk-write risk; there is nothing being downloaded or installed by the skill itself.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. The lack of credential requests is proportionate to its documented behavior.
✓ 持久化与权限
always is false and the skill does not request persistent privileges or attempt to modify agent configuration. Autonomous invocation is allowed (platform default), which is expected for skills.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/15
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install company-intel
镜像加速npx clawhub@latest install company-intel --registry https://cn.longxiaskill.com