Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/Chasen-Liao/resume-skillsnpx agentmods add skills/chasen-liao/resume-skills/resume-ats-optimizerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/chasen-liao/resume-skills/resume-ats-optimizer)<a href="https://agentmods.dev/skills/chasen-liao/resume-skills/resume-ats-optimizer"><img src="https://agentmods.dev/badge/skills/chasen-liao/resume-skills/resume-ats-optimizer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/chasen-liao/resume-skills/resume-ats-optimizer"><img src="https://agentmods.dev/badge/skills/chasen-liao/resume-skills/resume-ats-optimizer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 19 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.00756 |
| Opus 5 | $0.00034 | $0.00378 |
| Sonnet 5 | $0.00014 | $0.00151 |
| Haiku 4.5 | $0.00007 | $0.00076 |
Grade A, and why
resume-ats-optimizer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
ATS 简历审计器
将“更容易被解析”的建议与“保证通过筛选”明确区分，并保持候选人事实不变。
先读
读取 简历事实契约 与 写作规范中的 ATS 输出规则。若当前环境是源码仓库或已安装完整 npm 包 @chasen-liao/resume-skills，可用包内脚本自动检查：
python skills/resume-builder/scripts/validate_resume.py --html <resume.html> --mode ats
python skills/resume-builder/scripts/validate_resume.py --pdf <resume.pdf>
以上脚本随 npm 包发布（
skills/resume-builder/scripts/）。在包目录下运行时用node_modules/@chasen-liao/resume-skills/前缀替换skills/；通过npx skills add仅安装 SKILL.md 的环境没有这些脚本，此时按下方工作流做结构化检查即可，不要把脚本路径当作必需步骤。
协作入口
这是母版生成后和 JD 定制版生成后的质量关卡。默认检查并报告解析风险与关键词/事实缺口，但不静默修改简历；用户确认后，才将呈现修复交回 resume-builder 或 jd-tailorer。
没有 JD 时只检查可解析性和结构；有 JD 时把“可直接改善的呈现问题”与“必须保留的真实能力缺口”分开报告。它不替代 JD 分析，也不决定是否投递。
工作流
- 检查输入格式、是否存在可提取文本、标准章节标题和正文阅读顺序。
- 对 HTML 检查图像承载文字、表格、复杂定位、页眉页脚、不可复制文本等风险；对 PDF 检查页数与文本提取。
- 从 JD 分析中读取关键词，按“已确认候选人事实中的精确匹配 / 相关表达 / 缺失”报告覆盖情况。
- 给出两类建议：呈现修复（可直接做）与事实缺口（只能追问或保留缺口）。
- 需要导出时，以同一事实源生成单栏、标准标题、普通文本的 ATS-safe HTML/PDF；不为提高匹配率增加技能。
输出格式
# ATS 审计报告
## 解析与格式
- 通过：…
- 风险：…
## 关键词覆盖
| 关键词 | JD 来源 | 简历证据 | 状态 |
## 建议
1. 可直接修复：…
2. 需要候选人确认：…
约束
- “ATS-safe”表示降低已知解析风险，不代表任何具体系统一定读取正确。
- 不使用图片、图表或视觉布局承载关键信息；不改变 claim 内容与证据状态。
- 不以关键词堆砌替代可读的自然表达。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 54 lines · 68 tokens per session scan A b44182459002
resume-ats-optimizer is a skill published in the GitHub repository Chasen-Liao/resume-skills (28 stars, last pushed 4d ago), licensed MIT. It adds 68 tokens to every session and 756 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…