← 返回 Skills 市场
lanxevo3

Bounty Hunter Agent

作者 lanxevo3 · GitHub ↗ · v1.1.0 · MIT-0
cross-platform ⚠ suspicious
97
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install bounty-hunter-agent
功能描述
Autonomously scans GitHub, Algora, and Opire for bounty issues, scores by payout and competition, ranks opportunities, and can auto-submit PRs.
使用说明 (SKILL.md)

Bounty Hunter Agent

Metadata

  • Name: bounty-hunter-agent
  • Version: 1.0.0
  • Author: lanxevo3
  • Tags: github, bounty, automation, monetization, algora, opire
  • License: MIT

Description

Autonomous GitHub bounty hunting agent. Scans for paid issues across GitHub, Algora, and Opire, evaluates viability based on competition level and payout amount, and helps you prioritize and submit PRs automatically.

What It Does

  1. Scans repositories for bounty-labeled issues (bounty, 💰, reward, paid, algora, opire)
  2. Evaluates competition level by checking existing PRs and comments on each issue
  3. Scores opportunities by payout amount, competition density, issue age, and repo activity
  4. Prioritizes a ranked list of actionable bounties sorted by expected value
  5. Tracks state in a local JSON file so you never re-scan the same issues
  6. Spawns fix sessions — integrates with OpenClaw to kick off autonomous coding sessions for top-ranked bounties

Prerequisites

  • gh CLI authenticated (gh auth status should succeed)
  • Python 3.8+ (stdlib only — no pip dependencies)
  • Optional: OpenClaw runtime for automated fix session spawning

Usage

Quick Scan

python ~/.agents/skills/bounty-hunter-agent/scripts/bounty_scan.py

With OpenClaw

When installed as a skill, invoke via:

/bounty-hunter-agent scan

The agent will:

  • Search GitHub for bounty-labeled issues
  • Check Algora and Opire for listed bounties
  • Output a ranked JSON report to ~/.agents/skills/bounty-hunter-agent/state/bounties.json
  • Print a human-readable summary to stdout

Configuration

Set environment variables to customize behavior:

Variable Default Description
BOUNTY_MIN_PAYOUT 25 Minimum payout in USD to consider
BOUNTY_MAX_COMPETITION 5 Max competing PRs before skipping
BOUNTY_SCAN_LIMIT 100 Max issues to scan per query
BOUNTY_STATE_DIR ~/.agents/skills/bounty-hunter-agent/state Where to store state

Output Format

The scan produces a ranked list:

[
  {
    "rank": 1,
    "score": 87.5,
    "repo": "org/repo",
    "issue": 123,
    "title": "Add feature X",
    "payout_usd": 200,
    "competing_prs": 1,
    "url": "https://github.com/org/repo/issues/123",
    "labels": ["bounty", "💰 200"],
    "age_days": 3
  }
]

How Scoring Works

score = payout_weight * (payout / max_payout)
      + competition_weight * (1 - competing_prs / max_competition)
      + freshness_weight * (1 - age_days / max_age)

Default weights: payout=50, competition=35, freshness=15

Lower competition + higher payout + newer issue = higher score.

安全使用建议
This skill appears to be a GitHub issue scanner that uses your local gh CLI credentials and stores results under ~/.agents/skills/.../state/bounties.json — that part is coherent and low-risk. However, the README promises extra features (checking Algora/Opire bounties, auto-submitting PRs, and spawning OpenClaw fix sessions) that are not visible in the provided script. Before installing or invoking the skill: 1) request the complete, untruncated script and confirm whether any code actually implements Algora/Opire integrations or PR submission; 2) if you expect automated PR submission, require explicit code review and limit the gh token's permissions (use a token with minimal scopes or run in a throwaway account); 3) consider running the script in a sandbox or with a dry-run option to confirm it only reads data and does not push changes; and 4) if you plan to enable OpenClaw automation, verify the orchestration code and scope so it cannot autonomously modify other repos or exfiltrate tokens. If you cannot verify the missing functionality, treat the advertised auto-submit/third-party integrations as untrusted and avoid granting broader rights.
功能分析
Type: OpenClaw Skill Name: bounty-hunter-agent Version: 1.1.0 The bounty-hunter-agent is a legitimate automation tool designed to scan GitHub for issues with monetary rewards using the 'gh' CLI. The code in scripts/bounty_scan.py uses standard Python libraries to search for issues, calculate competition density, and rank opportunities based on a scoring algorithm, with no evidence of data exfiltration, malicious persistence, or prompt injection.
能力评估
Purpose & Capability
Name/description claim: scan GitHub, Algora, Opire, rank bounties, and auto-submit PRs / spawn fix sessions. The included script only calls the gh CLI / GitHub API (search, timeline) and produces a local ranked JSON — there is no visible integration with Algora or Opire, no auto-PR submission, and no OpenClaw orchestration in the portion shown. Requesting no special credentials is coherent for a read-only GitHub scanner (it relies on gh auth), but the extra advertised capabilities are not justified by the code.
Instruction Scope
SKILL.md instructs running the script and claims it will check Algora/Opire and can spawn OpenClaw sessions; the script as shown only searches GitHub via gh, extracts payouts, counts PRs, scores, and writes state to ~/.agents/skills/bounty-hunter-agent/state/bounties.json. The instructions are otherwise specific (uses gh CLI), and the script does write local state as documented. The mismatch between declared external integrations/auto-submit and the script is the main scope issue.
Install Mechanism
No install spec (instruction-only) and no third-party packages; the script uses only the Python stdlib and the gh CLI. This is low-risk from an install perspective because nothing is downloaded or extracted by the skill itself.
Credentials
No required env vars are declared; the script accepts optional BOUNTY_* overrides and relies on gh CLI authentication for GitHub access. Asking the user to authenticate gh is appropriate for the stated GitHub scanning purpose. There are no unrelated credential requests.
Persistence & Privilege
The skill persists state to ~/.agents/skills/bounty-hunter-agent/state/bounties.json which is reasonable for avoiding re-scans. always is false and the skill does not request elevated privileges. Nothing indicates modification of other skills or system-wide configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install bounty-hunter-agent
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /bounty-hunter-agent 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
No file changes detected for this release. - Version number updated from 1.0.0 to 1.1.0 in metadata only. - No functional, documentation, or code updates included.
v1.0.0
Initial release of Bounty Hunter Agent. - Scans GitHub, Algora, and Opire for bounty-labeled issues. - Scores and ranks bounties based on payout, competition, and issue freshness. - Outputs a prioritized JSON report and human-readable summary. - Supports local state tracking to avoid duplicate scans. - Integrates with OpenClaw for automated fix sessions on top-ranked bounties. - Configurable via environment variables (min payout, max competition, scan limit, state directory).
元数据
Slug bounty-hunter-agent
版本 1.1.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 2
常见问题

Bounty Hunter Agent 是什么?

Autonomously scans GitHub, Algora, and Opire for bounty issues, scores by payout and competition, ranks opportunities, and can auto-submit PRs. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 97 次。

如何安装 Bounty Hunter Agent?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install bounty-hunter-agent」即可一键安装,无需额外配置。

Bounty Hunter Agent 是免费的吗?

是的,Bounty Hunter Agent 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Bounty Hunter Agent 支持哪些平台?

Bounty Hunter Agent 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Bounty Hunter Agent?

由 lanxevo3(@lanxevo3)开发并维护,当前版本 v1.1.0。

💬 留言讨论