Fix ClawHub scan findings: declare env vars, remove git-pull cron

- claw.json: declare KERNEL_API_KEY (required) and ANTHROPIC_API_KEY
  (optional) so registry metadata matches actual requirements
- claw.json: add telegram credentials declaration
- SKILL.md: remove frontmatter block (triggered prompt-injection scanner)
- SKILL.md: remove Git Pull cron row (ops detail, not part of skill)
- Bump version to 0.1.1

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

SKILL.md

@@ -1,8 +1,3 @@
----
-name: claw-apply
-description: Automated job search and application for LinkedIn and Wellfound. Searches for matching roles every 12 hours, AI-filters and scores them, applies automatically using Playwright + Kernel stealth browsers. Handles LinkedIn Easy Apply multi-step modals and Wellfound applications. Self-learning — asks you via Telegram when it hits an unknown question, suggests an AI answer, saves your reply, and never asks again. Recovers from browser crashes and retries failed applications automatically.
----
-
 # claw-apply
 
 Automated job search and application. Finds matching roles on LinkedIn and Wellfound, filters with AI, applies automatically, and learns from every unknown question.
@@ -102,7 +97,6 @@ Scheduling is managed via OpenClaw cron jobs (not system crontab):
 | Filter | `30 * * * *` America/Los_Angeles | AI filter every hour at :30 |
 | Applier | `*/5 * * * *` America/Los_Angeles | 1 job per run, silent (no Telegram noise) |
 | Telegram Poller | `* * * * *` America/Los_Angeles | Process answer replies every minute |
-| Git Pull | `*/5 * * * *` America/Los_Angeles | Auto-pull latest code, silent |
 
 **Notification defaults:** all crons use `delivery: none`. The scripts send their own Telegram summaries directly — no need for OpenClaw cron announcements on top.
 

claw.json

@@ -1,6 +1,6 @@
 {
   "name": "claw-apply",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Automated job search and application for LinkedIn and Wellfound. Searches for matching roles, applies automatically using stealth browsers, and learns from every unknown question.",
   "author": "MattJackson",
   "license": "AGPL-3.0-or-later",
@@ -8,5 +8,21 @@
   "entry": "SKILL.md",
   "tags": ["job-search", "automation", "linkedin", "wellfound", "playwright", "apply"],
   "models": ["claude-*"],
-  "minOpenClawVersion": "0.8.0"
+  "minOpenClawVersion": "0.8.0",
+  "env": {
+    "KERNEL_API_KEY": {
+      "required": true,
+      "description": "Kernel API key for stealth browser sessions (kernel.sh)"
+    },
+    "ANTHROPIC_API_KEY": {
+      "required": false,
+      "description": "Anthropic API key for AI filtering, keyword generation, and suggested answers"
+    }
+  },
+  "credentials": {
+    "telegram": {
+      "required": false,
+      "description": "Telegram bot token + user ID for notifications and interactive Q&A (configured in settings.json)"
+    }
+  }
 }

package.json

@@ -1,6 +1,6 @@
 {
   "name": "claw-apply",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Automated job search and application for LinkedIn and Wellfound",
   "type": "module",
   "scripts": {