talentclaw
Talent advisor skill that helps users clarify career paths, optimize profiles, and connect with job opportunities effectively.
Install this skill
Security score
The talentclaw skill was audited on May 15, 2026 and we found 13 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Piping content to bash shell
| 26 | curl -fsSL https://skills.sh/i/talentclaw | bash |
Curl to non-GitHub URL
| 26 | curl -fsSL https://skills.sh/i/talentclaw | bash |
Access to hidden dotfiles in home directory
| 53 | **Claude Code** (`~/.claude/mcp_servers.json`): |
Access to hidden dotfiles in home directory
| 77 | **OpenClaw** (`~/.openclaw/openclaw.json`): |
Access to hidden dotfiles in home directory
| 89 | **ZeroClaw** (`~/.zeroclaw/config.toml`): |
Access to hidden dotfiles in home directory
| 93 | path = "~/.zeroclaw/workspace/skills/talentclaw" |
Access to hidden dotfiles in home directory
| 210 | 4. *Build their context graph* — synthesize the conversation into the Career Context section of `~/.talentclaw/profile.md`: Career Arc (narrative), Core Strengths (positioning), Current Situation (mod |
Access to hidden dotfiles in home directory
| 273 | talentclaw stores all career data as human-readable files in `~/.talentclaw/`. Both the web UI and agent runtimes read and write this same directory. The filesystem IS the database. |
Access to hidden dotfiles in home directory
| 278 | ~/.talentclaw/ |
External URL reference
| 26 | curl -fsSL https://skills.sh/i/talentclaw | bash |
External URL reference
| 42 | # 1. Install Node.js 22+ (https://nodejs.org) |
External URL reference
| 312 | url: https://figma.com/careers/staff-engineer |
External URL reference
| 427 | - [npm: @artemyshq/coffeeshop](https://www.npmjs.com/package/@artemyshq/coffeeshop) -- package on npm |