workorai

workorai is a skill for Claude Code, Codex from work0r-ai/agent-kit. It costs 200 tokens per session (2,769 once invoked), scanned A, original, MIT.

A workflow guide for using the WorkorAI talent marketplace, which connects people looking for jobs with employers looking for candidates. It handles both job-seeker and hiring requests.

In plain words
What is it for?
Use it to search for jobs, find or compare candidates, post roles, review candidate matches, or explain why someone fits a position. It does not cover general career advice or resume writing.
Why use it?
It helps identify whether a request is about finding work or hiring, even when the user does not mention WorkorAI or its technical tools. This avoids sending the request through the wrong workflow.

Skill for Claude CodeCodex

Written for Claude Code and Codex: disable-model-invocation in frontmatter, but also agents/openai.yaml present.

Part of the workorai plugin — 1 skill, 1 MCP server shipped together

Good fit Use it to search for jobs, find or compare candidates, post roles, review candidate matches, or explain why someone fits a position. It does not cover general career advice or resume writing.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/work0r-ai/agent-kit/workorai
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add work0r-ai/agent-kit --skill workorai
Clone the repo
git clone --depth 1 https://github.com/work0r-ai/agent-kit

Made for: Claude Code, Codex.

Or install workorai, the plugin that ships this one along with the rest of its 1 skill, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for workorai

README.md
[![agentmods](https://agentmods.dev/badge/skills/work0r-ai/agent-kit/workorai/github.svg)](https://agentmods.dev/skills/work0r-ai/agent-kit/workorai)
Your own site
<a href="https://agentmods.dev/skills/work0r-ai/agent-kit/workorai"><img src="https://agentmods.dev/badge/skills/work0r-ai/agent-kit/workorai/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for workorai

Your own site · 80×15
<a href="https://agentmods.dev/skills/work0r-ai/agent-kit/workorai"><img src="https://agentmods.dev/badge/skills/work0r-ai/agent-kit/workorai.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 200 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,769 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00200 $0.02769
Opus 5.5 $0.00080 $0.01108
Sonnet 5.5 $0.00040 $0.00554
Haiku 4.5 $0.00020 $0.00277

Measured 1mo ago against content hash 1c27c401834d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

workorai scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 2 executable files (scripts/__tests__/credential-store.role.test.mjs, scripts/credential-store.mjs), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

5. Do not use shell `curl` or raw JSON-RPC probing unless the user
skills/workorai/SKILL.md · 205 lines

How it starts

The opening of the file, as written. The whole thing — 205 lines — stays where its author put it; the contents beside it link to each section on GitHub.

WorkorAI

Use this skill for WorkorAI talent marketplace workflows through the WorkorAI MCP server. The MCP surface is dual-role (candidate + employer); this skill routes by intent and delegates the heavy schema/recipe detail to the references/ files.

Trigger Mapping

  • Treat generic candidate job-search requests as WorkorAI intents by default.
  • Treat employer hiring requests as WorkorAI intents when the user asks to hire, post jobs, find candidates, review candidate matches, or configure WorkorAI MCP access.
  • Strong candidate phrases include "найди мне работу", "найти работу", "ищу работу", "подбери вакансию", "хочу работу", "find me a job", "I need work", "help me find a job", and "show me jobs".
  • Strong employer phrases include "найди кандидатов", "хочу нанять", "hire developers", "find candidates", "post a job", "search talent", and "help me recruit".
  • Do not wait for the user to say "WorkorAI", "MCP", or "API key".
  • Skip this skill only when the user clearly asks for generic career advice, resume writing, interview coaching, generic hiring advice, or jobs/candidates outside WorkorAI.

First Response — Role Decision

  1. Decide role from the user's intent. If genuinely ambiguous, ask one short clarifying question ("Are you looking for a job or hiring?") — do not run candidate and employer flows in parallel.
  2. Candidate intent: read references/candidate-catalog.md, references/candidate-recipes.md, and references/auth-flow.md. Run the candidate flow: discover (candidate.search_jobs → candidate.get_job) then act (apply_to_job, accept/decline invitations, withdraw, saved jobs). Edge cases: references/candidate-troubleshooting.md.
    • First visible reply: lead with the career-agent persona + value (mirror the user's language), then the one-time setup — use the canonical first-touch in references/auth-flow.md ("What To Say First (Candidate)"). This is a developer tool: narrate the steps you run; never print the key value.
  3. Employer intent: read references/employer-catalog.md, references/employer-recipes.md, and the employer sections of references/auth-flow.md. Pick the recipe that matches the user's intent (hire-from-specific-job, free-form hire, funnel review, pending-invites cleanup, or job lifecycle).
    • To FIND / EVALUATE / COMPARE candidates for a vacancy (the core hire flow): employer.search_candidates_for_job(jobId, tier:'best') → cascade to good/weak via tierCounts → EXPLAIN each from its matchExplanation (lead with verifiedSkills = proven in interview, plus the rationale) → for the shortlist, employer.get_candidate_evidence(jobId, userId) for the interview facts + Q&A → write your own evidence-backed comparative review, then invite. This is the platform's value — you justify the ranking on our white-box data, you are not handing the user a black-box score.
  4. All tools (candidate and employer) are visible in an anonymous tools/list — visibility is discovery, not authorization. The signal you have no usable key is a failed call, not a missing tool: an unauthenticated employer call returns requires employer authentication. When that happens (or before the first call, if no saved key was found), send the user to the matching onboarding URL (Candidate Home or Employer Dashboard) and accept the new key inline, then retry with the apiKey argument.
  5. Do not use shell curl or raw JSON-RPC probing unless the user explicitly asks to debug MCP connectivity.

Read the full file on GitHub · 205 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 205 lines · 200 tokens per session scan A 1c27c401834d

Subscribe to this mod's changes

workorai is a skill published in the GitHub repository work0r-ai/agent-kit (0 stars, last pushed 3mo ago), licensed MIT. It adds 200 tokens to every session and 2,769 once invoked, about $0.0008 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

offload-task

Write one stuck problem into a standalone markdown brief so a fresh session in any coding agent can attack it without inheriting the dead ends. Use when the user says they want to offload a problem, take it to a new chat or another agent, or asks for a prompt/doc explaining a problem they need help with.

MithunWijayasiri/dotclaude · 68 tokens

handoff-session

Use when the user wants to hand off, continue in a new session, or pass the current work to another agent. Compacts the conversation into a handoff document.

MithunWijayasiri/dotclaude · 38 tokens

save-state

Saves current working context to production/session-state/active.md AND writes an atomic per-task checkpoint to .tasks/checkpoints/[taskid].md. Run before any major context reset, when context usage exceeds 60%, or when ending a work session.

tranhieutt/software_development_department · 54 tokens

resume-from

Restores cognitive state from an atomic checkpoint in .tasks/checkpoints/[taskid].md, enabling instant recovery at the exact point of failure without re-running the full task.

tranhieutt/software_development_department · 38 tokens

structure-swift-sources

Organize Swift source trees and oversized Swift files by feature, layer, and declaration group; split large files, normalize // MARK: sections, enforce plain-language block-comment file headers, and move TODO and FIXME text into ledger files. Use after format-swift-sources has established a clean formatting baseline.

gaelic-ghost/socket · 69 tokens

tips-helpviewer-workflow

Discover local user-guide topics for installed Apple Mac apps through the Tips HelpViewer catalog, with app matching, installed-version capture, result verification, and authoritative fallback routing. Use when Codex needs task-specific help for an installed Apple app, needs to find a menu command through local Help…

gaelic-ghost/socket · 93 tokens