Home / All Skills / Workflow & Core Tools / boss-zhipin-scraper
Workflow & Core Tools · Backtthefuture/huangshu

boss-zhipin-scraper

Guides users to provide resumes and job preferences, utilizing a dedicated BOSS-Agent Chrome Profile with macOS Computer Use to search for jobs, read full JDs, deduplicate, calibrate market requirements, score, and generate A/B/C outreach tiers on visible official BOSS Zhipin pages. After calibration, it prompts for the target greeting count (default recommended: 20) and continuously searches and reaches out to qualified positions only after user confirmation of specific batches, tiers, counts, and greeting modes. Designed for personal job-seeking tasks such as "finding jobs", "searching positions", "reading JDs", "analyzing BOSS positions", "filtering positions", and "continuous greeting outreach". CLI, CDP, Playwright, hidden APIs, Cookie extraction, and anti-detection workarounds are strictly prohibited.

L3 Networked · Declare domain & key scopeV1 Commit-PinnedNetwork AccessWrite FileDual-pass Audit
Author BacktthefutureGitHub Backtthefuture/huangshu ↗License MIT(仓库根 LICENSE)Commit 3cfa898c51
Control levels describe skill capabilities and suggested control measures; they do not represent quality or safety certifications, nor do they dictate usability. Usage decisions rest entirely with users and administrators. Different agent hosts apply varying constraints; do not assume hosts provide automatic protection. Third-party skill copyrights belong to their original authors. Use at your own risk.

1How It Works & Mechanism

Implements the job-seeking workflow as a state machine with confirmation gates across 10 sequential, unskippable states.

skills/boss-zhipin-scraper/SKILL.md
不得跳过当前状态的必需输入或确认。用户已提供的信息直接继承,不重复询问。
What is happening here: Uses an explicit state machine to constrain the process, collecting first, confirming next, and executing last.

Sets mandatory boundaries: Operates exclusively within the dedicated Chrome Profile titled BOSS-Agent, explicitly prohibiting CLI/CDP/Playwright/Cookie extraction/anti-detection approaches.

skills/boss-zhipin-scraper/SKILL.md
- 禁止 BOSS CLI、CDP、远程调试、Bridge、Patchright、Playwright、无头浏览器、隐藏 API、`/wapi`、XHR/fetch 注入、Cookie 或 stoken 提取、代理轮换、指纹伪装和验证码绕过。
What is happening here: Encodes the compliance approach as a hard boundary, blocking interface reverse engineering and automation bypasses against the platform.

Prompts for resume upload during initial setup, extracting only job-matching information while suppressing irrelevant privacy data from echoes and reports.

skills/boss-zhipin-scraper/SKILL.md
只提取岗位匹配信息;姓名、手机号、邮箱等无关隐私不得主动回显或写入报告。
What is happening here: Builds a job profile while minimizing privacy exposure.

Completes job preferences across two rounds, with a maximum of 3 search-altering questions per round.

skills/boss-zhipin-scraper/SKILL.md
每轮最多问 3 个会改变搜索结果的问题:
What is happening here: Narrows down actionable search criteria through limited questioning.

Search confirmation gate authorizes read-only calibration only; operating BOSS pages without confirmation is prohibited.

skills/boss-zhipin-scraper/SKILL.md
只有用户确认搜索卡或明确确认同等内容后,才能操作 BOSS 页面。搜索确认仅授权只读校准。
What is happening here: Separates "permission to view pages" and "permission to send messages" into two distinct authorizations.

Calibration phase defaults to reading 15–30 job cards and selecting approximately 10 full JDs, strictly requiring 0 external actions.

skills/boss-zhipin-scraper/SKILL.md
- 默认读取 15–30 张职位卡片,并从中选择约 10 条代表性完整 JD。
What is happening here: Uses read-only samples to establish market requirements and scoring thresholds first.

Dynamic A/B/C tiers must simultaneously pass hard criteria, total score threshold, core dimension threshold, and risk vetoes.

skills/boss-zhipin-scraper/SKILL.md
档位不能只看总分;必须同时通过:
What is happening here: Uses multi-layered thresholds to prevent misjudging jobs based solely on total scores.

Outreach confirmation gate requires verifying batch, tier, target greeting count, and greeting mode, defaulting to 20 when unspecified.

skills/boss-zhipin-scraper/SKILL.md
本批目标招呼数;未指定时主动询问,默认建议 `20` 个,不得静默代填;
What is happening here: Hands message volume authorization back to the user to guard authorization boundaries.

Execution loop runs strictly sequentially per job: read list → deduplicate → read JD → filter → score → risk check → outreach → write checkpoint.

skills/boss-zhipin-scraper/SKILL.md
读列表 → 查历史台账 → 读完整 JD → 硬条件过滤 … → 触达或归档 → 写检查点
What is happening here: Deconstructs single-job decisions into ordered steps, leaving an auditable trail at each step.

Hard stop on risk control: Immediately saves checkpoint and halts batch upon CAPTCHA, 429, session disconnect, or prompts to copy Cookies.

skills/boss-zhipin-scraper/SKILL.md
- 验证码、安全验证、`_security_check`、429、code 37、访问频繁、账号风险或环境异常;
What is happening here: Halts immediately upon risk control signals to avoid account risks caused by confronting platform defenses.

2Core Capabilities

01State machine orchestration for job-seeking workflows with confirmation gates
02Dedicated browser connection and manual login handover
03Read-only market calibration and representative sample selection
04100-point multi-dimensional scoring baseline (hard criteria/risk veto priority)
05Dynamic A/B/C tiers and core dimension thresholds
06Outreach authorization and greeting template constraints
07Deduplication, ledger tracking, and checkpoint persistence
08Risk control hard stops and instant state recovery
09Offline acceptance test suite (22 cases)

3External Dependencies

KindDependency / Endpoint
networkBOSS直聘(zhipin.com)
climacOS Computer Use + Chrome(专用 BOSS-Agent Profile)

4Recommended Governance & Evidence

Suggested Controls for Safe Operation
For Agent Runtime
Declare allowed domains and key scope
For Administrators
Least privilege keys, retain request logs
Evidence & Triggers (File Paths & Excerpts)
  • 网络端点: External Network Access Declaration: Accesses public pages of BOSS Zhipin (zhipin.com) via host browser to read job listings and full JDs; submits in-platform greetings upon user authorization
  • 本地工作目录: File I/O and Artifact Output: ~/.boss-zhipin-scraper/ledger/job_ledger.jsonl (job ledger)
Audit Notes: Yellow: The skill directory contains only SKILL.md, agents/openai.yaml, and 4 references documents, with no scripts, network libraries, or credential reading; it operates visible dedicated Chrome Profile via host macOS Computer Use, visits public zhipin.com pages, and sends in-platform greetings only after user batch-by-batch authorization, making outbound targets predictable. Locally, it writes only to ~/.boss-zhipin-scraper/ledger and batch CSVs/reports. It strictly forbids CLI/CDP/Playwright/hidden APIs/Cookie extraction/anti-detection, thus not triggering Red. Host Computer Use permissions and browsers are considered host behaviors and are not factored into the risk tier.

5Second-Pass Verification

  • [ok] 状态机状态数与顺序 — SKILL.md 的 ONBOARD→PROFILE→…→REVIEW 与正文 10 个小节一一对应。
  • [ok] 校准只读约束 — SKILL.md 与 calibration-tiering.md 均写 external_actions=0 / 外部动作数必须为 0。
  • [ok] 档位阈值一致性 — 主 SKILL.md 的 A≥85/B≥80/C≥72 与 references 表格一致,且要求核心维度最低值。
  • [ok] 验收案例数量 — ledger-acceptance.md『离线验收案例』逐条编号 1–22,共 22 条。
  • [ok] 禁止路线可定位 — §3 扫描『危險旗標/防護繞過』无命中,正文确有禁止 CDP/Playwright/隐藏 API 等条款。
  • [ok] 凭证读取 — 全文无 Cookie/stoken 读取指令,反而明确『不得读取、代填或保存验证码和认证信息』。
  • [ok] 档位复核 — 只经宿主浏览器操作公开站点 + 本地台账写入,无凭证读取、无防护绕过 → yellow。

6Verdict & Scenarios

  • Hardcoded safety boundaries: CLI/CDP/Playwright/hidden APIs/Cookie extraction/anti-detection are strictly banned; login and CAPTCHAs are handled manually by the user.
  • Fine-grained authorization: Search cards only grant read-only calibration; outreach requires separate confirmation of batch, tier, quantity, and greeting mode.
  • High auditability: Four-way transactional writes across ledger, batch, and audit trails, accompanied by 22 offline acceptance test cases.
  • Best for: Job seekers who need to conduct personal job searches on BOSS Zhipin, are willing to confirm step-by-step, accept manual login/CAPTCHAs, and value auditable compliance workflows.
    Not for: Non-personal job-seeking purposes, batch agency operations/headhunting scraping, users seeking unattended auto-submissions or account modifications, or environments lacking macOS Computer Use.
    Install Agent-Ready
    ① Verified Mirror 2026-10-10
    Option A · Direct DownloadDownload boss-zhipin-scraper.tar.gz
    sha256: e68954aed6706a48…
    Option B · Copy Guide for Agent
    install.json
    Agents automatically download and verify mirrors from this JSON guide.
    ② Upstream GitHub
    GitHub Repo ↗
    Pinned to commit 3cfa898c51.