A repository called ai-job-search picked up roughly 1,400 stars on GitHub in a single day, according to today's trending data — enough to put it near the top of a page that has lately been dominated by agent infrastructure.

The code is not the interesting part. The interesting part is what the number measures. When a project that automates job applications outperforms most developer tools on a given day, the audience is not only developers. It is people who need a job, and who have concluded that applying properly is now a task better delegated to software.

That conclusion is rational, and that is the problem. A single posting at a large company now routinely draws hundreds or thousands of applications. Filters arrive first — keyword matching, minimum years, degree requirements — and humans arrive, if at all, much later. Under those conditions the expected value of one carefully written cover letter approaches zero while the cost of applying stays at half an hour. Volume beats craft, and anything that can be done at volume by hand can be done at greater volume by a script.

The mechanics of these agents are unremarkable, which is why they keep appearing: scrape the boards, filter by title and stack, tailor a CV to the posting's own vocabulary, fill the form fields, sometimes submit. The interesting engineering is not in the agent. It is in the countermeasures the agent has to survive — CAPTCHAs, rate limits, session fingerprinting, and terms of service that explicitly forbid automated submission on most large platforms.

That last point deserves more attention than it usually gets. A meaningful share of what these tools do is against the terms of the sites they operate on. The people running them are, by and large, not trying to defraud anyone; they are trying to be seen. But an agent that mass-submits is indistinguishable, at the platform level, from spam, and the platforms are correct to treat it that way.

The arms race that follows is familiar from every other corner of automation. Employers add assessments, take-home tasks and recorded interviews to restore signal. Candidates automate the assessments. Employers add AI-detection. Candidates learn what the detector dislikes. Each round makes the process longer and more unpleasant for the honest majority — the candidate with no agent and the recruiter with no budget for better tooling.

The uncomfortable economics sit underneath. If applying is free at the margin, applications inflate until they mean nothing, and the screening burden shifts entirely onto employers — who respond by raising prerequisites. That is one plausible contributor to the entry-level squeeze: junior roles that once asked for willingness now ask for a portfolio, a referral, or three years of experience, precisely because the applicant pool can no longer be read.

There is a legitimate version of this, and it is not spam. An agent that reads a posting, tells you honestly whether you fit, drafts a specific letter, and stops for your approval is a research assistant. An agent that fires four hundred applications into the void is a denial-of-service attack on a hiring pipeline, and it will not get you the job — recruiters talk to each other, and a CV that arrives everywhere at once acquires a reputation before the candidate does.

The tell is whether the tool optimises for your attention or the platform's throughput. Star counts do not distinguish between the two, which is why a trending repository is a signal about the labour market and not about software quality.

What to watch: whether major job platforms tighten verification in response; whether agent-built CVs start getting filtered by provenance rather than content, which would be a strange new kind of class system; and whether the next wave of these tools markets honesty as a feature, because that would mean the spam phase is over.