by Gsync
Job application tracker and AI-powered job search assistant. Helps job seekers manage their search journey with AI resume review, job matching, task logging, and application analytics, all while keeping your data private.
# Add to your Claude Code skills
git clone https://github.com/Gsync/jobsyncGuides for using ai agents skills like jobsync.
Last scanned: 8/6/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@eslint/config-array: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@eslint/eslintrc: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@hono/node-server: Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",
"severity": "high"
},
{
"type": "npm-audit",
"message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
"severity": "low"
},
{
"type": "npm-audit",
"message": "eslint: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to host confusion via backslash authority introducer",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono: ReDoS in CORS middleware via Access-Control-Request-Headers",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: Vulnerability found",
"severity": "high"
},
{
"file": "README.md",
"line": 71,
"type": "remote-install",
"message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://raw.githubusercontent.com/Gsync/jobsync/main/deploy.sh | sudo\"",
"severity": "low"
}
],
"status": "WARNING",
"scannedAt": "2026-08-06T06:30:16.283Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how jobsync compares with popular alternatives.
jobsync is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Gsync. Job application tracker and AI-powered job search assistant. Helps job seekers manage their search journey with AI resume review, job matching, task logging, and application analytics, all while keeping your data private. It has 1,489 GitHub stars.
jobsync returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/Gsync/jobsync" and add it to your Claude Code skills directory (see the Installation section above).
jobsync is primarily written in TypeScript. It is open-source under Gsync on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh jobsync against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Track every application, get AI resume reviews and job matches, and discover new openings automatically — free, open source, and your data never leaves your server.
🔒 Self-hosted · 🤖 Local AI via Ollama or any cloud provider · 🔌 MCP server for Claude Desktop, Hermes, etc


⭐ If JobSync helps your search, a star helps other job seekers find it.
Application Tracker: Record every application with its company, title, dates and current status.

Monitoring Dashboard: See your search progress, activity and daily goals at a glance.
Resume Management: Store resumes, export them as PDFs, and import existing PDF or Word files with AI.
Automated Job Discovery: Schedule searches over company job boards and AI-match each listing to your resume. Details
Task & Activity Management: Track tasks and time your activities. Tasks · Activities
Job Timeline: Record each stage of a job's hiring process — when it happened, who interviewed you and which questions they asked. Details
Interviews: One list of every interview round across all your jobs, upcoming and past, with its interviewers, prep questions and outcome. Details
Contacts: Keep recruiters, interviewers and references, linked to the jobs they touched. Details
Company Pages: One page per company with its jobs, people and links, plus a watchlist. Details
Question Bank: Build a library of interview questions and answers, tagged by skill.
Data Backup & Restore: Export everything as one zip, import it anywhere, and undo an import. Details
AI Assistant: A docked chat that reviews resumes, scores job matches, writes cover letters and adds jobs you paste in. Details
AI Agent Integration (MCP): Add jobs and questions from Claude Desktop and other agents. Details
Make sure Docker is installed and running, then:
git clone https://github.com/Gsync/jobsync.git
cd jobsync
docker compose up
Note: The first startup downloads the prebuilt app image, so give it a moment before opening the browser.
Open http://localhost:3737 and create your account. That's it!
API keys for AI providers can be configured in Settings after signing in.
Environment variables are set in a .env file beside docker-compose.yml (copy .env.example). Do not edit docker-compose.yml itself — updates replace it.
| Variable | Description |
|---|---|
TZ |
Your timezone (e.g. America/Edmonton). Set this on remote servers to avoid activity time shifts. |
AUTH_SECRET |
Auto-generated if not set. To set manually: openssl rand -base64 32 |
ENCRYPTION_KEY |
Encrypts the API keys you save in Settings. Set your own (openssl rand -base64 32) before adding any keys, and never change it afterwards — a new value makes every stored API key unrecoverable. |
NEXTAUTH_URL |
The address you open JobSync at. Defaults to http://localhost:3737; on a homelab server, use the server's IP or hostname. |
MCP_ENABLED |
Set to false to turn off the MCP server. Enabled by default. |
DATABASE_URL |
Leave unset to use the bundled Postgres. To use your own, set it to your server's address and also set BUNDLED_DB=0; without it an unused bundled database container still starts. The bundled image includes the pgvector extension, which an upcoming release uses for resume embeddings; your own server will need it then too. See Upgrading to Postgres. |
Upgrading from a SQLite release? Read Upgrading to Postgres first — the upgrade is one-way.
From the project directory, run the deploy script to pull the latest image and restart:
curl -fsSL https://raw.githubusercontent.com/Gsync/jobsync/main/deploy.sh | sudo bash -s
On Windows, run the PowerShell equivalent from the project directory instead (deploy.sh needs WSL or Git Bash; deploy.ps1 runs natively):
.\deploy.ps1
Note: If you are updating in a homelab environment, edit
NEXTAUTH_URLin your.envfile to use your server IP address instead oflocalhost. See.env.examplefor the expected format.
All of JobSync's AI features live in one place: a chat panel that docks to the side of the app instead of taking it over, so the page you were on stays visible and usable while the assistant works.
Open it from the AI Assistant button in the header, or let the app open it for you — the Review button on a resume and the Match with AI and Cover Letter buttons on a job all start the matching request in the panel.
What you can ask for:
The reviews, matches and letters are the same analyses the dedicated panels used to produce — the chat is a new way in, not a lighter-weight version.
The assistant is deliberately narrow about what it can see: it reads your resumes and the single job you're looking at, and nothing else. It can't list or search your jobs, and it can't see tasks or activities. Pasted postings are also treated as untrusted text, so instructions hidden inside a posting can't make the assistant act on your data.
Pick a model under Settings > AI Settings before using the panel — it needs one that supports tool calling, and it will tell you rather than guessing if none is set. See known-good models for the ones that have been tested, including a fully local option.
Export any resume as a professionally formatted PDF directly from the resume page. Choose between two layouts — a clean Simple template and a more polished Professional template. If a PDF attachment already exists, you'll be prompted to replace it or keep the download only.
Import an existing resume from a PDF or Word (.docx) file. AI extracts structured data — contact info, summary, skills, work experience, education, and certifications — and presents each section as a review card. You can accept or skip individual sections before saving them to your resume.
Set up automations that search for new jobs on a schedule and AI-match them against your resume, so relevant openings come to you.
Greenhouse — track specific companies by name from a built-in directory of 2,400+ companies (or by pasting a board URL). Each run pulls every published role from those companies' Greenhouse boards, ranks them against your target titles, skills, and resume with a fast local relevance score, and runs the AI match on only the top candidates to keep costs bounded. No API key required.
Lever — same company-tracking workflow as Greenhouse, backed by a