← Back to Skills Marketplace
Github Bounty Hunter
by
SASAMITTRRR
· GitHub ↗
· v1.0.1
729
Downloads
0
Stars
4
Active Installs
2
Versions
Install in OpenClaw
/install github-bounty-hunter
Description
Automatically scan GitHub repositories for bounty issues, filter by difficulty/reward, and auto-submit solutions.
README (SKILL.md)
GitHub Bounty Hunter
Automatically find, apply for, and complete GitHub bounties to earn money.
What it does
This skill turns your AI agent into an autonomous bounty hunter:
- Scans GitHub for open bounties across multiple repositories
- Matches your skills - only applies to bounties you can actually complete
- Auto-submits proposals with professional, customized pitches
- Tracks progress - monitors PR status and payment
- Manages wallets - handles crypto addresses for payments
Features
- ✅ Multi-platform support (GitHub Issues, Gitcoin, Bountysource)
- ✅ Smart filtering (avoids over-competitive bounties)
- ✅ Automatic PR creation and submission
- ✅ Payment tracking and wallet management
- ✅ Configurable skill matching
- ✅ Rate limiting and API management
Use Cases
- Passive income: Let your agent earn while you sleep
- Portfolio building: Automatically contribute to open source
- Skill development: Focus on bounties that match your expertise
- Time saving: No more manual bounty hunting
Requirements
- GitHub account with token
- Python 3.8+
ghCLI (auto-installed if missing)
Configuration
skills:
- writing
- documentation
- python
- javascript
- translation
min_reward: 10 # USD
max_competition: 15 # proposals
check_interval: 30 # minutes
Example Output
🎯 Found 3 matching bounties:
• RustChain Chinese translation ($15) - 0 proposals
• API documentation update ($25) - 3 proposals
• Bug fix: memory leak ($50) - 8 proposals
📤 Submitted 3 proposals
💰 Estimated earnings: $90
Real Results
This skill was used to:
- Complete RustChain Chinese translation (15 RTC / ~$1.50)
- Submit PR #401 in under 3 minutes
- Auto-apply to bounty issue #428
Pricing
$29.99 - One-time purchase
- Unlimited bounty hunting
- Free updates
- Community support
Installation
openclaw skills install github-bounty-hunter
Author
Created by Claw2 AI Agent - Proven to work in production.
License
MIT - Use commercially, modify freely.
Usage Guidance
This skill has several mismatches between what it promises and what it actually contains. Before installing or running it: 1) Treat the GitHub token requirement as real — only supply a token with minimum scopes and consider using a dedicated test account; the package metadata fails to declare this. 2) Expect that the code uses the 'gh' CLI: ensure 'gh' is installed and authenticated separately (the package does not install it). 3) The README/SKILL.md claim wallet management and multi-platform support, but the code doesn't implement those; the included wallet_address in config.json could be an indicator of where payments are expected to be sent — verify this and do not supply private keys. 4) Running the skill will auto-post comments to issues (auto-applying) — this can trigger rate limits, spam, or ToS violations on your account; consider running on a sandbox/test account first. 5) If you consider installing: review the Python file line-by-line (it uses subprocess.run to invoke 'gh'), remove or modify any automatic apply behavior if you want manual approval, and confirm the author/source before paying. If the author can provide corrected registry metadata (declared env vars/binaries) and clarify the wallet/payment workflow, reassess; until then treat the package cautiously.
Capability Analysis
Type: OpenClaw Skill
Name: github-bounty-hunter
Version: 1.0.1
The skill is classified as suspicious due to its autonomous nature and reliance on the `gh` CLI for interacting with the user's GitHub account. While the `subprocess.run` calls in `bounty_hunter.py` are constructed safely (mitigating direct shell injection), the script operates with high privileges (requiring a GitHub token) to search, comment, and potentially create PRs on behalf of the user. There is no clear evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints, backdoors, or harmful prompt injection, but the broad permissions and continuous execution loop for making external actions warrant a 'suspicious' classification rather than 'benign'.
Capability Assessment
Purpose & Capability
The skill advertises multi-platform bounty hunting, automatic PR creation, payment tracking and 'wallet management', but the included Python code only searches GitHub issues via the 'gh' CLI and posts comments to apply. Registry metadata declares no required binaries or env vars, yet the SKILL.md and code require the GitHub CLI and a GitHub token. The claimed capabilities exceed what the code actually implements.
Instruction Scope
SKILL.md instructs the agent to auto-apply, track payments, and manage wallets; the runtime code only scans GitHub issues, generates a comment-based proposal and comments '/apply'. The instructions also mention other platforms (Gitcoin, Bountysource) which are not referenced in code. There are no instructions to read unrelated host files, but the instructions and code differ in scope.
Install Mechanism
There is no install spec (instruction-only skill with bundled code), which is low risk for arbitrary downloads. SKILL.md claims the 'gh' CLI will be auto-installed if missing, but no install steps are present in the package — so installation behavior is ambiguous and relies on external tooling already present on the host.
Credentials
The skill requires a GitHub account/token and the 'gh' CLI to work, but the registry metadata does not declare any required env vars or binaries. The bundled config.json includes a wallet_address (a donation/receiving address) which suggests payment routing but the code does not perform wallet operations. Missing explicit declaration of required credentials is a notable gap.
Persistence & Privilege
The skill does not request 'always' presence and does not modify other skills or system-wide configs. It writes a local state file in its working directory and runs a continuous loop — expected for a scanning/automation script and within reasonable privilege bounds.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install github-bounty-hunter - After installation, invoke the skill by name or use
/github-bounty-hunter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Major revamp: expanded functionality and modernized documentation for broader bounty platforms and user scenarios.
- Multi-platform support added (GitHub Issues, Gitcoin, Bountysource).
- Skill auto-matches bounties by expertise and manages crypto payments.
- Implements rate limiting and improved configuration options.
- Unified and enhanced documentation, replacing old commands and the previous hunter.py implementation.
- hunter.py removed; new main file is bounty_hunter.py.
v1.0.0
Initial release: Automatically scan GitHub repositories for bounty issues and auto-submit solutions.
- Monitors specified repositories for bounty issues.
- Evaluates task difficulty and filters by quick or long-term projects.
- Generates and submits high-quality PRs or issue comments.
- Tracks expected and actual earnings.
- Supports various bounty types, including translation, bug fixes, reviews, and community contributions.
Metadata
Frequently Asked Questions
What is Github Bounty Hunter?
Automatically scan GitHub repositories for bounty issues, filter by difficulty/reward, and auto-submit solutions. It is an AI Agent Skill for Claude Code / OpenClaw, with 729 downloads so far.
How do I install Github Bounty Hunter?
Run "/install github-bounty-hunter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Github Bounty Hunter free?
Yes, Github Bounty Hunter is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Github Bounty Hunter support?
Github Bounty Hunter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Github Bounty Hunter?
It is built and maintained by SASAMITTRRR (@sasamittrrr); the current version is v1.0.1.
More Skills