recruiting-copilot

给 HR / 猎头的 AI 招聘工作流：岗位标准梳理、Boss直聘 + 猎聘双通道寻源初筛、市场人才盘点、简历评估、约面试、候选人台账与日报。可装成 Claude Code 插件或 DeepSeek Harness (dsh) 插件——后者自带可直接上手操作的「招聘浏览器」面板；也能配合任意读 AGENTS.md 的 AI 编程助手使用。

PluginAI ModelsAutomationDeveloperBrowser

Verification

L1 · Found

Security

High

Health

Active

Trust

Unrated

What it does

Installation

dsh plugin --profile web add github:Viy1204/recruiting-copilot

Install method: GitHub · not yet tested in container (L3+)

Compatibility

DSH Version	Status
not stated	Declared — not tested

Requirements

• Node.js: not stated
• DSH: declared "not stated"
• External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOHIGH-RISKSCAN5 FILES

20cf11

Security reviewAutomated review · daily

HIGH-RISK

Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.

1 critical·3 warning·14 info·5 files scanned

code-exec ×1

Version binding

plugin version0.6.0dsh manifest

scanned commit20cf113d013d2026-08-18

latest commit20cf113d013d

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: High1 critical · 3 warning · 14 info

• Static heuristic scan: done (5 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 12

infoUses localStorageclient.js:165
const saved = Number.parseInt(localStorage.getItem(WIDTH_KEY), 10);
infoUses localStorageclient.js:251
localStorage.setItem(WIDTH_KEY, String(width));
infoMakes network requests (fetch / axios)client.js:107
fetch(`${BASE}/input?source=${encodeURIComponent(source())}`, {
infoMakes network requests (fetch / axios)client.js:211
return fetch(`${BASE}/control?source=${encodeURIComponent(sourceRef.current)}`, {
infoMakes network requests (fetch / axios)client.js:224
fetch(`${BASE}/state.json`, { cache: "no-store" })
criticalChild process module usage (Node.js)lib/index.js:29
import { spawn } from "node:child_process";
warningHTTP request to a raw IP addresslib/index.js:322
const res = await fetch(`http://127.0.0.1:${this.port}/json/version`, { signal: ctrl.signal });
warningHTTP request to a raw IP addresslib/index.js:337
const res = await fetch(`http://127.0.0.1:${this.port}/json/list`, { signal: ctrl.signal });
warningHTTP request to a raw IP addresslib/index.js:750
const res = await fetch(`http://127.0.0.1:${this.port}/json/new?${encodeURIComponent(target)}`, { method: "PUT" });
infoReads process.envlib/index.js:73
return process.env.RECRUIT_BROWSER_HIDDEN?.trim().toLowerCase() !== "false";
infoReads process.envlib/index.js:160
const fromEnv = process.env.CHROME_PATH?.trim() || process.env.PUPPETEER_EXECUTABLE_PATH?.trim();
infoReads process.envlib/index.js:164
const local = process.env.LOCALAPPDATA;

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-18 · activity: Active

• Repo created: 2026-08-18

• Stars: ★ 36 · Forks: 13

• Health: Active — committed within last 30 days

Source

GitHub: github.com/Viy1204/recruiting-copilot