A

Aplica

eurafaeldecarvalho/aplica · v0.3.1 · Development & Workflow

by eurafaeldecarvalhoScan grade: GoodAwesome AI Plugins

Claude Code plugin that scores public job postings against your own profile and applies in your logged-in Chrome with your real data under daily caps, never paying, uploading documents or inventing answers; needs a paid Claude plan, Claude in Chrome and Python 3.11+, and job sites' terms restrict automated access, so your account can be limited

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Aplica a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • 8 skills

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Aplica?

Aplica is a published development & workflow plugin for AI coding agents in the Claude Code ecosystem, developed by eurafaeldecarvalho and distributed through the HOL AI plugin registry. Claude Code plugin that scores public job postings against your own profile and applies in your logged-in Chrome with your real data under daily caps, never paying, uploading documents or inventing answers; needs a paid Claude plan, Claude in Chrome and Python 3.11+, and job sites' terms restrict automated access, so your account can be limited.

Canonical slug
eurafaeldecarvalho/aplica
Version
v0.3.1 · updated Nov 2, 2026

Registry snapshot

Support the project
GitHub SponsorsKo-fi
Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
8 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

75

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
40/100
MCP server setup
100/100
Plugin Security
87/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/eurafaeldecarvalho/aplica
Source commit
eabcf5e80221…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Needs review
Security result
87
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-E9Tmf9 / cisco-skill-scanner: failedcodex:hol-plugin-scanner-E9Tmf9 / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

13/16

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

13/16

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSINGReported 2 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the aplica entry from the aplica marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall aplica@aplica.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "aplica",
  "version": "0.3.1",
  "description": "Aplica — auto-apply for Claude Code. Agentic, config-driven job search that finds roles and applies in your own logged-in browser, with your own data, conservative anti-ban defaults, and everything customizable.",
  "author": {
    "name": "Rafael de Carvalho"
  },
  "homepage": "https://github.com/eurafaeldecarvalho/aplica",
  "repository": "https://github.com/eurafaeldecarvalho/aplica",
  "license": "MIT",
  "keywords": [
    "jobs",
    "job-search",
    "auto-apply",
    "automation",
    "linkedin",
    "ats",
    "claude-code"
  ],
  "icon": "./.claude-plugin/icon.png",
  "interface": {
    "displayName": "aplica",
    "developerName": "eurafaeldecarvalho"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/eurafaeldecarvalho/aplica
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

8 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • aplica-ats-boards

    scheduled-tasks/ats-boards/SKILL.md

    Aplica routine — applies to ATS/board jobs (Lever/Greenhouse/Ashby + aggregators), in batches, via public-API scanners. ORCHESTRATOR.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • aplica-feed

    scheduled-tasks/feed/SKILL.md

    Aplica routine — scrolls the LinkedIn feed for jobs in posts; applies by link and (only if the config allows) does social actions within the caps. ORCHESTRATOR.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • aplica-linkedin-jobs

    scheduled-tasks/linkedin-jobs/SKILL.md

    Aplica routine — applies to LinkedIn Jobs (via a public scan API + the logged-in browser), in batches, slowly. ORCHESTRATOR.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • aplica-recruiters

    scheduled-tasks/recruiters/SKILL.md

    Aplica routine — checks recruiter messages (LinkedIn inbox + Gmail) and replies/applies only within job-application scope. ORCHESTRATOR.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • aplica-summary

    scheduled-tasks/summary/SKILL.md

    Aplica routine — builds the day's summary (applications, stuck jobs, to-dos) and, if the user wants, emails it to themselves. ORCHESTRATOR.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • apply-engine

    skills/apply-engine/SKILL.md

    Aplica's job-search and application rules — target profile, knockouts, fit gate, ghost-job gate, per-field filling, résumé variant selection, honesty and stuck-job handling. Everything comes from the user's config.json/profile.json; nothing is hard-coded. Read by every application subagent.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • common-rules

    skills/common-rules/SKILL.md

    Rules common to every Aplica routine (authorization, the jobdb database, browser lock and isolation, LinkedIn, subagents, humanizer, caps). Read by every routine and every subagent before acting.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • setup-wizard

    skills/setup-wizard/SKILL.md

    Prepares an Aplica instance — creates the user's config dir, generates config.json and profile.json from the templates, validates them against the schemas and initializes the database. Use on first use or when the user asks to configure/reconfigure.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

660 bytes

5d2ebad35e7d8c34…

.claude-plugin/plugin.json

file

648 bytes

82a77bb729f06488…

.codex-plugin/plugin.json

plugin-manifest

709 bytes

562bcb9702f840eb…

commands/aplica-draft.md

file

1,582 bytes

d01804cd17388e67…

commands/aplica-run.md

file

2,191 bytes

eaa5a2edffd38042…

commands/aplica-schedule.md

file

1,570 bytes

b63593658ce189e6…

commands/aplica-setup.md

file

549 bytes

a414db9a1417cf20…

commands/aplica-status.md

file

1,099 bytes

db068c220845dc88…

LICENSE

file

1,436 bytes

4a7fb7c2b3689d37…

README.md

file

9,622 bytes

789da6fb5fa412c5…

scheduled-tasks/ats-boards/SKILL.md

skill

3,753 bytes

2e3c630275880055…

scheduled-tasks/feed/SKILL.md

skill

2,037 bytes

0d80836d6c8715db…

scheduled-tasks/linkedin-jobs/SKILL.md

skill

2,430 bytes

574f70ea3f596c3f…

scheduled-tasks/recruiters/SKILL.md

skill

2,862 bytes

b83f0f19e90af9b6…

scheduled-tasks/summary/SKILL.md

skill

1,469 bytes

ef8411893841c5b9…

skills/apply-engine/SKILL.md

skill

13,777 bytes

a5646d4363572fc5…

skills/common-rules/SKILL.md

skill

12,762 bytes

41a43c4181bcc881…

skills/setup-wizard/SKILL.md

skill

2,869 bytes

3dd4bc07a5f32b7d…

Aplica — Frequently asked questions

What is Aplica?
Aplica is an AI plugin in the HOL registry. Claude Code plugin that scores public job postings against your own profile and applies in your logged-in Chrome with your real data under daily caps, never paying, uploading documents or inventing answers; needs a paid Claude plan, Claude in Chrome and Python 3.11+, and…
How do I install Aplica?
Install Aplica in your harness: Claude Code — /plugin marketplace add eurafaeldecarvalho/aplica; Any agent — npx [email protected] add eurafaeldecarvalho/aplica. Full step-by-step guidance is on the HOL plugin page.
How do I install Aplica in HOL Guard?
To install Aplica in HOL Guard, start with hol-guard plugin install eurafaeldecarvalho/aplica --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install Aplica in Claude Code?
To install Aplica in Claude Code, start with /plugin marketplace add eurafaeldecarvalho/aplica. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for Aplica computed?
Aplica has a HOL Trust Score of 75 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/eurafaeldecarvalho%2Faplica/trust
Who publishes Aplica?
Aplica is published by eurafaeldecarvalho and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins