Job Application Agent helps you discover, qualify, complete, and track your own job applications from any Agent Skills-compatible coding agent—without inventing credentials or hiding consequential decisions. It combines browser-assisted form filling with a verified résumé, candidate-defined targeting, secure local profile storage, duplicate detection, and an application ledger.

Install — for humans and agents

Run this one canonical command in a terminal:

npx job-application-agent@latest install

If you are asking a coding agent to set it up, paste this:

Install the Job Application Agent by running:
npx job-application-agent@latest install

Then confirm the installed version with:
npx job-application-agent@latest status

Requires Node.js 20 or newer. The installer places the skill at ~/.agents/skills/job-application-agent and enables automatic updates by default. Compatible agents load that vendor-neutral path; if a vendor skills directory such as ~/.cursor/skills already exists, the installer also copies the skill there. The updater checks npm at login, every hour on macOS, Linux, and Windows, and at the start of a job-application workflow. Candidate profile data, the canonical résumé, telemetry identity, and application ledgers remain outside the replaceable skill directory.

# See the installed version and update mode
npx job-application-agent@latest status

# Update immediately
npx job-application-agent@latest update

# Explicitly opt out or back in
npx job-application-agent@latest updates disable
npx job-application-agent@latest updates enable

Updates are staged and validated before replacement. The immediately previous skill version is retained locally so a failed installation leaves the working version intact.

[!IMPORTANT]
You stay in control. The agent pauses for authentication, CAPTCHA, legal attestations, demographic questions, unclear eligibility, sensitive identifiers, and unverifiable claims.

✨ What it does

🛡️ Safety by design

The skill deliberately pauses for decisions or actions that should stay with you:

• passwords, SSO, MFA, and CAPTCHA;
• demographic and voluntary self-identification questions;
• legal attestations and government identifiers;
• unclear work authorization, sponsorship, location, or compensation;
• claims that cannot be verified from your profile or résumé.

It never reads browser cookies or session files, and it records an application as submitted only after the destination shows a clear success confirmation.

🚀 Quick start

1. Install the skill

npx job-application-agent@latest install

This is the supported installation path for both people and coding agents. After install, ask the current agent to list available skills if it does not pick up job-application-agent immediately.

2. Onboard your profile

Start a new agent chat and invoke this skill however your agent names skills ($job-application-agent, /job-application-agent, or natural language):

Use job-application-agent to onboard my resume and job-search preferences.

The agent will ask for your canonical résumé and missing application facts. You choose one of two submission modes:

• review-each — inspect every completed application before submission.
• routine-auto — allow routine submissions within a destination or batch you explicitly authorize; safety pauses still apply.

3. Use natural commands

search jobs
apply https://company.example/jobs/123
apply all relevant jobs from this thread: <URL>
run a round of 10
record outcome Company — Senior Engineer — interview

🧭 How it works

flowchart LR
    A["Verified résumé + profile"] --> B["Discover direct roles"]
    B --> C["Validate activity and eligibility"]
    C --> D["Score and deduplicate"]
    D --> E["Fill truthful application"]
    E --> F{"Manual action needed?"}
    F -- Yes --> G["Pause for candidate"]
    F -- No --> H["Validate and submit"]
    G --> H
    H --> I["Confirm success and update ledger"]

The bundled script provides deterministic profile validation, résumé import, scoring, deduplication, ledger updates, and ten-application reviews. The current coding agent handles discovery and browser interaction while following the guardrails in SKILL.md.

🔐 Privacy model

The package contains no candidate profile, résumé, application history, credentials, or browser data. The included .gitignore adds a second line of defense against committing common private artifacts.

📊 Usage analytics

Structured anonymous usage analytics are enabled by default so the project can learn which discovery sources, job segments, ATS platforms, and application steps work well. Analytics may include company, role title, job domain/hash, published salary band, fit score, workflow stages, pauses, submissions, outcomes, and bounded interview-quality/failure-point categories. Local reviews also correlate interview quality with source and fit-score bands; private notes never enter analytics.

It never includes candidate identity, profile fields, résumé content, prompts, form answers, notes, browser data, IP addresses, or raw errors. A Cloudflare relay validates the schema before forwarding personless events to a private PostHog dashboard.

The public usage dashboard shows aggregate installations, activity, applications, outcomes, ATS mix, and role seniority. The relay increments a separate aggregate-only Cloudflare D1 store after PostHog accepts each event. The public API exposes no raw events or installation identifiers and suppresses small segments.

node ~/.agents/skills/job-application-agent/scripts/job-application.mjs telemetry status
node ~/.agents/skills/job-application-agent/scripts/job-application.mjs telemetry disable

See the complete event contract, retention policy, and controls in ANALYTICS.md.

🧰 Requirements

• Node.js 20 or newer
• A browser-capable coding agent that loads Agent Skills
• OS-backed profile storage (macOS Keychain, or Windows Credential Manager + DPAPI)

Secure profile storage is supported on macOS and Windows. Linux can keep ledgers and a canonical résumé locally, but profile storage needs macOS or Windows.

✅ Validate locally

npm test

GitHub Actions validates the skill frontmatter and runs the same test suite on every push and pull request.

💬 Use without installation

Paste SHARE_PROMPT.md into a new agent chat. The installed skill is recommended for repeat use because it bundles deterministic checks and private local state handling.

⚖️ Responsible use

This project assists a person with their own job search. It does not guarantee interviews, offers, eligibility, or application accuracy. You are responsible for reviewing factual claims, complying with applicable laws and platform terms, and deciding when an application should be submitted. Do not use it to impersonate another person, evade access controls, bypass CAPTCHA, or make deceptive claims.

🛡️ Security

Please report suspected privacy or security issues using the private process in SECURITY.md. Do not open a public issue containing personal data, credentials, résumé content, or application records.

📄 License

Released under the MIT License.