No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by suxrobGM · Codex Skill · ★ 80
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is jobpilot safe to install? View the security audit →
JobPilot A local-first AI job-application app. A Next.js + SQLite web UI owns all state and embeds an interactive Claude Code or Codex terminal session that runs the JobPilot provider skills against real job boards via Playwright. Components Web app (src/web/) - . Owns profile, credentials, resumes, job boards, applications, campaigns, and the batch queue. It embeds an xterm.js terminal panel and exposes "Run autopilot" / "Run apply" buttons that inject slash commands. JobPilot.Terminal (src/terminal/) - . .NET 10 ASP.NET Core process that owns one active provider PTY (winpty) and bridges it to the web UI over WebSocket. The terminal drawer can switch between Claude Code and Codex. Plugin (plugin/) - one provider-neutral plugin loaded by both providers, with no generation step. It holds the hand-authored skill pack ( plus shared setup, auth, browser-tips, and form-filling docs under ), the Playwright MCP config (), and a manifest per provider (, — both name the plugin ). Claude: . Codex: auto-discovered via .agents/plugins/marketplace.json () when launched at the repo root (codex --no-al
| Stars | 80 |
| Forks | 19 |
| Language | TypeScript |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 66.704813515557/100 |
| Open Issues | 8 |
| Last Updated | 2026-10-01 |
| Created | 2026-03-22 |
| Platforms | browser, claude-code, codex, mcp, node |
| Est. Tokens | ~15k |
These tools work well together with jobpilot for enhanced workflows:
Looking for a jobpilot alternative? If you're comparing jobpilot with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Official plugin distribution for the hosted Zapier MCP server. Install it in your AI client and connect to tho
Privacy-first job Agent Skill for Claude/Cursor/Codex: verified facts only, OS secrets, confirmed submissions.
Opinionated AI coding agent and dev environment automation for macOS
Production-ready AI agent profiles for Claude Code, Cursor, Codex, OpenClaw, and Hermes. Search, install, and
AI 简历生成与排版 Skill｜12 套可投递 HTML/PDF 模板。AI resume builder for creating, updating and tailoring resumes to any JD
AI-powered resume & cover letter generator with dual ATS + HR scoring. Works for any profession. Claude Code p
Explore other popular codex skill tools:
jobpilot is An AI agent that applies to jobs for you - searches boards, tailors your resume, fills applications, messages recruiters. All from a real browser on your machine, on your Claude Code or Codex subscrip. It is categorized as a Codex Skill with 80 GitHub stars.
jobpilot is primarily written in TypeScript. It covers topics such as ai-agents, automation, autonomous-agents.
You can find installation instructions and usage details in the jobpilot GitHub repository at github.com/suxrobGM/jobpilot. The project has 80 stars and 19 forks, indicating an active community.
jobpilot is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to jobpilot on Agent Skills Hub include zapier-mcp, job-application-agent, hal-9000. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: