Skill audit report
mock-lab Audit report.
面向任意行业与职能岗位进行真实模拟或逐题训练，重点覆盖互联网产品、AI 产品、战略商分、数据分析、咨询及商业化等方向。先确认目标公司、岗位、可选 JD、轮次与运行方式，再组合通用协议、岗位 Playbook、题型、问题模式、领域视角和用户材料。产品经理及以产品判断为核心的复合岗位进行完整模拟时，严格贴合公司业务赛道和岗位性质，在 1 小时内动态覆盖自我介绍题、简历深挖题、行为动机题、工作职能题、开放业务题、产品实战题和费米估算题七类；顺序和权重按 JD、轮次与现场回答调整。普通面试一次一题，真实模拟结束后统一复盘，逐题训练则答完即诊断并重组专业答案。用户说“模拟面试”“面试陪练”“按这个公司和 JD 问我”“练 AI 产品项目深挖/费米题/业务面/HR 面/Case 面/群面”时使用；不负责生成面试准备题库或复盘真实面试。
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
FAIL30
13 GitHub stars
Stars/forks activity
FAIL32
13 stars, 0 forks; issue activity unavailable in current metadata
Recent maintenance
PASS88
2mo since push
License clarity
PASS86
MIT
README/SKILL.md completeness
PASS86
Metadata includes enough usage and workflow context
Dependency/runtime risk
PASS82
network or browser surface
Install availability
PASS92
npx skills add riwonswain-ovo/OfferLoop --skill mock-lab
Install command safety
PASS92
standard package or runtime install path
Permission surface
INFO74
network or browser access, database access
Repository evidence
PASS86
https://github.com/riwonswain-ovo/OfferLoop/tree/main/skills/mock-lab
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add riwonswain-ovo/OfferLoop --skill mock-lab
Repository
88
https://github.com/riwonswain-ovo/OfferLoop/tree/main/skills/mock-lab
License
86
MIT
Maintenance
88
2mo since push
AI review
55
The skill reads and processes user-supplied materials such as JD, resume, and Feishu documents, but SKILL.md does not explicitly instruct the model to treat those materials as untrusted data and ignore any embedded instructions. This creates a prompt-injection risk.
README/SKILL.md completeness
86
Usable description available
Dependency risk
82
network or browser surface
Install command safety
92
standard package or runtime install path
Permission surface
74
network or browser access, database access
Stars/forks activity
32
13 stars, 0 forks; issue activity unavailable in current metadata
Adoption
42
13 GitHub stars
Warnings
- The skill reads and processes user-supplied materials such as JD, resume, and Feishu documents, but SKILL.md does not explicitly instruct the model to treat those materials as untrusted data and ignore any embedded instructions. This creates a prompt-injection risk.
- SKILL.md instructs running `../.offerloop-runtime/scripts/artifact_contract.py` without documenting what the script does, pinning its content, or verifying it is safe. If that script is not part of the reviewed skill directory, it is also a supply-chain risk.
- The skill depends on `../.offerloop-runtime/...` and several referenced `references/...` files that are not all present in the submitted excerpt. If those dependencies are missing in the actual repository, the skill will fail during startup.
- Low GitHub adoption signal
- Quality score needs review
- GitHub adoption: 13 GitHub stars
- Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options