← 返回 Skills 市场

Algora Bounty Assistan

Name: Algora Bounty Assistan
Author: santosparra651-arch

作者 santosparra651-arch · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

155

总下载

当前安装

版本数

在 OpenClaw 中安装

/install algora-bounty-assistant

功能描述

Automatically search for low-competition GitHub bounty tasks (comments < 5) and generate a clean report with details and estimated difficulty.

使用说明 (SKILL.md)

GitHub Bounty Hunter 🎯💰

Automatically find low-competition bounty tasks on GitHub. Filter by number of comments to avoid crowded bounties and maximize your chance of getting accepted.

Features

🔍 Search open bounties with label:bounty and state:open
🎯 Low-competition filter - only shows bounties with \x3C N comments (default 5)
📊 Generate clean report with title, URL, comment count, difficulty estimation
⚡ Fast search via GitHub API
🎨 Sorted by competition level - least competition first

Installation

npx clawhub install github-bounty-hunter

Usage

Search for low-competition bounties:

npx github-bounty-hunter

Customize maximum comment count:

npx github-bounty-hunter 3

Output example:

=========================================
  GitHub Bounty Hunter - Search Results
=========================================

Found 5 low-competition bounties:

👉 Add transaction history page
   URL: `https://github.com/example/project/issues/6` 
   💬 Comments: 2 | 💪 Difficulty: Beginner

👉 FAQ & How It Works Page
   URL: `https://github.com/example/project/issues/264` 
   💬 Comments: 1 | 💪 Difficulty: Beginner

...

Requirements

Node.js 16+
GitHub API access (authenticated for higher rate limits)

How it works

This skill uses the GitHub Search API to find open issues with the bounty label, filters by comment count, sorts by least comments first, and outputs a clean report ready for you to pick your next bounty.

Perfect for:

Beginners looking for easy bounties
Bounty hunters who want less competition
Daily quick scans for new opportunities

Changelog

1.0.0

Initial release
Basic search and filtering
Report generation

安全使用建议

This skill appears coherent and limited to querying the public GitHub Search API and printing results. Before installing: (1) review the small scripts yourself (they are included and readable); (2) if you provide a GITHUB_TOKEN for better rate limits, use a least-privilege token and do not expose long-lived personal tokens unnecessarily; (3) be aware that running code via npx will execute the package's scripts — run in a safe environment if you don't trust the publisher; (4) confirm the publisher/owner if provenance matters (no homepage or recognizable author is provided). Overall the footprint is small and proportional to the stated purpose.

功能分析

Type: OpenClaw Skill Name: algora-bounty-assistant Version: 1.0.0 The skill bundle is a legitimate tool for searching and analyzing GitHub bounty issues. The scripts (scripts/search.js and scripts/analyze.js) use the standard Node.js https module to query the public GitHub API and output formatted reports to the console. There is no evidence of data exfiltration, malicious execution, or prompt injection.

能力评估

✓ Purpose & Capability

Name/description match the included scripts: both search and analyze scripts call the GitHub Search API for issues labeled 'bounty' and generate reports. No unrelated binaries, credentials, or services are requested.

ℹ Instruction Scope

SKILL.md and the scripts limit behavior to querying api.github.com and printing reports. The README suggests authenticated GitHub API access for higher rate limits, but the package does not declare any required env vars (e.g., GITHUB_TOKEN) nor do the scripts read env vars — this is a minor mismatch but not malicious. The instructions do not ask the agent to read local files or send data to unexpected endpoints.

✓ Install Mechanism

There is no install spec in the registry entry (instruction-only skill). The repository includes package.json and small scripts; there are no downloads from unknown URLs or extract steps. Running via npx would execute the included script behavior — expected for a CLI tool.

✓ Credentials

The skill requests no environment variables or credentials. Its functionality (GitHub Search API) can work unauthenticated but with strict rate limits; the SKILL.md's suggestion to authenticate is reasonable but optional. No unrelated secrets are requested.

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills or system configs, and has no elevated persistence or privilege requests.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install algora-bounty-assistant
安装完成后，直接呼叫该 Skill 的名称或使用 /algora-bounty-assistant 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

github-bounty-hunter 1.0.0 - Initial release - Search open bounty issues on GitHub and filter by number of comments - Generate a clean report with title, URL, comment count, and estimated difficulty - Sort bounties by lowest competition first - Supports comment count customization and fast API search

元数据

Slug algora-bounty-assistant

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题