Multi-Platform Bounty Scanner

Automatically scan and filter new bug and OSS bounty opportunities across 50+ platforms by tech stack, reward, and difficulty with daily automation support.

This skill is coherent enough to run a local GitHub-based bounty scan, but it overpromises features that are not implemented. Before installing or enabling it: 1) Inspect scanner.js yourself — it only uses the GitHub CLI (gh) and reads/writes ~/.bounty-scanner/*. 2) Understand that 'gh' network activity will use whatever GitHub auth is configured for your account; there are no declared secrets required by the skill. 3) Do not expect the advertised 50+ platform support, Telegram notifications, or paid tiers to work — those are documented but not implemented. 4) If you plan to run it on a schedule, run it first interactively and review the files it writes (seen.json, config.json). 5) Prefer running in an isolated/sandboxed account or VM if you are uncertain about running third‑party code from an unknown source.

Type: OpenClaw Skill Name: multi-bounty-scanner Version: 1.0.0 The skill is a basic CLI tool designed to search for GitHub issues labeled 'bounty' using the GitHub CLI (`gh`). While the documentation in `README.md` and `SKILL.md` makes ambitious claims about supporting 50+ platforms and offering 'Pro' features, the actual implementation in `scanner.js` is limited to a single hardcoded GitHub search command. The use of `child_process.execSync` is safe as it does not interpolate user-controlled input into the shell command. There are no indicators of data exfiltration, malicious persistence, or prompt injection attacks.