Install
$ agentstack add skill-1xiaoyueryuer-boss-hr-agent-toolkit-boss-agent-cli ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
boss-agent-cli
> AI Agent 专用的 BOSS 直聘本地辅助 CLI 工具 — 34 个顶层命令,默认低风险模式聚焦本地辅助、只读优先、用户主动触发,不做自动触达、批量操作或平台数据抓取。
Install
uv tool install boss-agent-cli
# 或 pipx install boss-agent-cli
登录流程(双阶段策略)
原则: 有 Cookie 直接注入,无 Cookie 提示用户扫码。
第1步:检查 CLI 登录态
boss status # 检查 CLI 登录态
boss --role recruiter status # 招聘者模式
如果返回 logged_in: true,说明 CLI 已有登录凭证 → 尝试提取 Cookie 注入到 CDP 浏览器。
第2步(优先):Cookie 注入(CLI 已登录时)
# 第一步:用 IDA 获取 Cookie
# 第二步:将 Cookie 通过 CDP add_cookies 注入浏览器
# 第三步:刷新 BOSS 页面验证是否自动登录
关键 Cookie 字段:zp_at(认证令牌)、wt2(登录态)、__zp_seo_uuid__、bst
注入后导航到目标页面即可,无需用户扫码。
第3步(兜底):提示用户扫码(CLI 未登录 / Cookie 注入失败时)
- 启动 CDP 浏览器:
``bash # Windows Edge(推荐) "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" \ --remote-debugging-port=9222 \ --user-data-dir="%USERPROFILE%\.workbuddy\chrome-profiles\boss-cdp" \ --remote-allow-origins=* ``
- 打开 BOSS 登录页:
- 导航到
https://www.zhipin.com/web/user/?ka=header-login - → 明确告知用户「登录页面已打开,请扫码登录」
- 等待用户确认登录成功后,再进行后续操作(JD 提取 / 简历下载等)
登录后验证
boss --role recruiter me # 验证招聘者信息
boss --role recruiter hr jobs list # 验证可看到在线职位
常见问题
boss status可能假阳性(返回登录但实际 token 已过期),用boss me或boss hr jobs list验证更可靠- Windows 上 PYTHONHOME 环境变量可能冲突,运行命令前加
PYTHONHOME=""
Recruiter Workflow
| Command | Description | |---------|-------------| | boss hr applications | 查看候选人投递申请 | | boss hr candidates | 搜索候选人 | | boss hr chat | 招聘者沟通列表 | | boss hr resume | 查看/请求候选人简历 | | boss hr reply | 回复候选人消息 | | boss hr request-resume --job-id | 请求候选人附件简历 | | boss hr jobs list/online/offline | 职位列表与上下线管理 |
Key Commands
| Command | Description | |---------|-------------| | boss schema | 返回全部命令 JSON(Agent 首先调用) | | boss search | 搜索职位(8 维筛选) | | boss detail | 职位详情 | | boss hr resume --job-id --security-id | 查看候选人简历 | | boss login | 四级降级登录 | | boss status | 检查登录态 | | boss doctor | 诊断环境 |
Output Conventions
- stdout: JSON only (structured envelope)
- stderr: Logs and progress (controlled by
--log-level) - exit 0: Success (
ok: true) - exit 1: Failure (
ok: false)
Platform & Role
# 招聘者模式
boss --role recruiter --platform zhipin --cdp-url http://localhost:9222
# 求职者模式(默认)
boss ... (no flags)
Safety
- 不自动发消息(CLI 权限不足)
- 默认低风险模式阻断批量操作
- 候选人数据链路默认阻断敏感操作
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: 1xiaoyueryuer
- Source: 1xiaoyueryuer/boss-hr-agent-toolkit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.