Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Viy1204/recruiting-copilot --skill recruit-dailygit clone --depth 1 https://github.com/Viy1204/recruiting-copilotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/viy1204/recruiting-copilot/recruit-daily)<a href="https://agentmods.dev/skills/viy1204/recruiting-copilot/recruit-daily"><img src="https://agentmods.dev/badge/skills/viy1204/recruiting-copilot/recruit-daily/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/viy1204/recruiting-copilot/recruit-daily"><img src="https://agentmods.dev/badge/skills/viy1204/recruiting-copilot/recruit-daily.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 26 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 86 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 87 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 88 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 89 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00118 | $0.01942 |
| Opus 5 | $0.00059 | $0.00971 |
| Sonnet 5 | $0.00024 | $0.00388 |
| Haiku 4.5 | $0.00012 | $0.00194 |
Grade A, and why
recruit-daily scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
recruit-daily —— 每日招聘流水线
每日主力动作：把 Boss 直聘 + 猎聘两个渠道的「查未读 → 主动寻源 → 初筛 → 打招呼 → 建档 → 出日报」串成一条流水线。
这是编排文档：CLI 命令细节见 references/channels.md，
台账与日报格式见 references/ledger-and-report.md，
日报卡片推送见 references/daily-card.md。
本文档只管「顺序、判断、跨渠道协同、安全」。
铁律：先读事实源，别凭记忆
开工先读（都在工作区根下）：
CONTEXT.md—— 术语、初筛硬规则、在招岗位与优先级（唯一事实源，随时可能更新）。AGENTS.md—— 分工与「不可逆动作等确认」红线。01-jd/_internal/<role>.md—— 各岗命脉技能 / 排除信号 / 关键词迭代表（寻源前必读，越搜越准）。
本文档不写任何硬规则数字——年龄线、学历线、地点要求全部以 CONTEXT 为准，避免两处打架。
如果 CONTEXT 硬规则区还是空的（没跑过岗位梳理），停下来先走 skills/recruit-grill/SKILL.md。
主流程（按需跳步）
-
查未处理：
boss list --unread（角标 > 0 才有）liepin chatlist --json，过滤unread_count非 "0"。- 有未读：逐个按 CONTEXT 硬规则判 → 该回复的回复、该要简历的要、 该排除的先记台账等用户确认（绝不自动点"不合适"）。
- 没未读：转主动寻源。
-
定寻源岗位与优先级：读 CONTEXT「在招岗位与优先级」，按优先级分配今天的额度。
-
双通道 × 双入口寻源（每个目标岗都跑），命令与坑见 channels.md：
- boss：
boss positions拿岗位槽位 → 人才库boss search <词> --job <岗>+ 推荐boss recommend <岗>。 - 猎聘：
liepin joblist --json拿 ejobId →liepin search "<词>" --city <城市> --json+liepin recommend --json。 - 搜索词用
_internal/<role>.md关键词迭代表里最新一轮的有效词。 - 完成判据：每个目标岗，boss 与猎聘各自的 search + recommend 两入口都跑过——漏一个渠道或入口 = 没做完。 CONTEXT 里若已沉淀"某岗某渠道无效"的结论，可按结论跳过并在日报注明。
- boss：
-
硬规则初筛：严格套 CONTEXT「初筛硬规则」+ 各岗
_internal的命脉技能与排除信号。 判定顺序：硬门槛（年龄/学历/地点）→ 命脉对口 → 排除信号 → 评级（⭐~⭐⭐⭐，命脉强 = ⭐⭐⭐）。 -
打招呼（对外不可逆——先读下方安全规则）。合适的按渠道打。
- 完成判据：每个过筛人选要么已打招呼、要么记了跳过原因（硬规则/额度/已联系过），逐一回报，无静默遗漏。
-
补台账
02-sourcing/dedup-ledger.csv（去重键 = 姓名+应聘岗位）。格式见 ledger-and-report.md。台账是唯一事实源。- 完成判据：本轮接触过的每个候选人在台账里有且仅有一行；无重复序号；按岗位计数与本轮处理人数对得上。
-
出日报：
- 本机有
lark-cli且已配置 → 飞书云文档； - 没有 → 写本地
runtime/reports/YYYY-MM-DD.md。 - 两种载体结构相同，见 ledger-and-report.md。内容从台账同步，不另立事实源。
- 完成判据：日报含今日概况数字、按岗人选表、待用户确认清单三块，且文档链接/文件路径已回给用户。
- 本机有
-
推日报卡片（可选补充）：用户要在 IM 收到提醒时，往飞书推一张互动卡片，正文只放 「四个数字 + 重点人选 + 待你拍板清单」，长尾折叠，按钮跳第 7 步的文档。骨架、字段坑与发送命令见
references/daily-card.md。没 IM 通道 → 跳过，别伪造推送。- 完成判据：卡片过 schema 校验且过美观度自查（校验通过≠可发），五层结构齐，
数字与台账一致，
message_id与收件人已回给用户。
- 完成判据：卡片过 schema 校验且过美观度自查（校验通过≠可发），五层结构齐，
数字与台账一致，
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 91 lines · 118 tokens per session scan A 82dd590e1c8b
recruit-daily is a skill published in the GitHub repository Viy1204/recruiting-copilot (65 stars, last pushed 9d ago), licensed MIT. It adds 118 tokens to every session and 1,942 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
chrome-cdp-ex
Your EYES into the user's live Chrome browser and Electron apps. This skill lets you SEE and INTERACT with the user's actual browser or Electron app — their open tabs, logged-in sessions, and live page state. You MUST use this whenever the user's request involves browser content or Electron app inspection in ANY way.…
create-site
Creates a new Power Pages code site (SPA) using React, Angular, Vue, or Astro. Guides through the full process from initial concept to deployed site: requirements discovery, scaffolding, component planning, design, implementation, validation, and deployment. Use when the user wants to create, build, or scaffold a new…
google-ads-audit
Google Ads account audit and business context setup. Use for account-health audits and business-context setup. Trigger on "audit my ads", "ads audit", "set up my ads", "onboard", "account overview", "how's my account", "ads health check", "what should I fix in my ads", or when the user is new to NotFair and hasn't run…
review
5-pass structured code review — correctness, security, performance, readability, consistency.
alive:system-upgrade
Upgrade ALIVE to the current version. Handles v1/v2/v3.x source states, multi-surface aware (alive-mcp / Hermes / Codex), retroactive version detection, partial-failure resume, dry-run previews, and rollback inspection.
extract-resume
Parse a resume's uploaded PDF into structured JSON (basics, experience, projects, skills, education) and save it to the editor.