Guardrails
What Seekter never does while it auto-applies: no LinkedIn Easy Apply, no CAPTCHAs, no passwords, no invented answers. And how it handles prompt injection.
Auto-applying to jobs is only worth it if it's safe for you and fair to employers. Seekter's guardrails override everything, including your own standing "don't ask me". They're rules in the skills, not settings, so nothing in your profile can switch them off.
What Seekter Never Does
- Solve a CAPTCHA. A visible CAPTCHA turns the form into a hand-off for you.
- Create an account or type a password. Account walls are handed off. It first checks whether the system has a way to apply without an account, because several do.
- Accept terms of use or codes of conduct on your behalf. Cookie banners are declined.
- Send an email or a message as you, post a review or a salary, or pay for anything.
- Submit a value it can't verify. A wrong answer is worse than a hand-off.
- Invent anything. No story, number or metric your profile doesn't hold.
Instructions Come Only From You
Seekter reads job postings, forms and emails all day. Text in any of them that tries to give an AI instructions is treated as data, never followed.
Before a form, every posting and form page is checked for hidden instructions to AI ("must include the word…"). A match is reported, not obeyed, and that form isn't submitted. A genuine "do not use AI" rule from an employer turns the form into a hand-off with only the factual fields filled.
Seekter never applies or acts on LinkedIn, in any mode, even when asked. No Easy Apply, no save, no follow, no connect, no message. LinkedIn's terms don't allow extensions that automate its site, and it restricts accounts that use them.
Finding a posting takes you seconds; filling the form is the work. So:
- LinkedIn Easy Apply postings come back to you as a list to send yourself, with the resume to pick.
- A LinkedIn job link you bring is fine. Seekter finds the employer's own form behind it.
linkedin.mode in profile/settings.json has two values:
| Mode | What Seekter does |
|---|---|
email (default) | Never opens LinkedIn. Reads your job-alert emails and the links you bring. |
read | Also reads LinkedIn searches, the job notifications and job details, read-only, under a per-run limit, with pauses between requests. |
Only you can switch read on, and it's still against LinkedIn's terms; the risk to your account is yours. At the first warning or unusual-activity page, Seekter stops reading for the run and switches itself back to email.
Your Data Stays on Your Machine
profile/, applications/ and runs/ are git-ignored. Your contact details, resumes, tracker and reports never leave your computer through the repository.
What Claude, employers and job sources do see while Seekter works is written down in PRIVACY.md.
When you send improvements back with /seekter-git, the diff is scanned for your personal details before anything is committed.
You're Still the Sender
Every application goes out in your name, and the terms of every job board and application system are yours to follow. Read the disclaimer: what you're responsible for, what Seekter won't do for you, and why there's no guarantee.
Found a way around a guardrail? Report it through a private security advisory, not a public issue.